Skip to content
OpenAdvisories

Vendor

polarnl

6 known vulnerabilities.

Products

PolarLearn 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-35610

    PolarLearn has a Server Action Admin Bypass in Account Management Actions

    PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, setCustomPassword(userId, password) and deleteUser(userId) in the account-management module used an inverted admin check. Because of the inverted condition, authenticated n…

    polarnl PolarLearn
  • High 7.1
    CVE-2026-25126 Public exploit

    PolarLearn's unvalidated vote direction allows vote count manipulation

    PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/v1/forum/vote`) trusts the JSON body’s `direction` value without runtime validation. TypeScript types are not enforced at runtime, so an at…

    polarnl PolarLearn