CVE-2026-63244
CVE-2026-63244 · Authentication Bypass Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
CVSS 9.8 · Critical · EPSS 0.5%
- Published
- Updated
Affected products and versions
learning management system
- Versions
- N.A: Not affected
No fix published