Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-63244 EUVD-2026-108611GHSA-6hr5-7mj9-8pm2

Authentication Bypass Vulnerability

Published Oct 23, 2026 · Updated Nov 2, 2026 · Assigned by CSA

Description

An authentication
bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)
could allow an unauthenticated remote attacker to bypass password
authentication and the OAuth authentication flow by sending a specially crafted
POST request, potentially resulting in unauthorised access to user accounts and
full administrative control of the LMS platform.

Affected products

VendorProductAffectedFixed
WizLearn Technologies Pte Learning Management System — N.A

References