CRITICAL 9.8 NVD

CVE-2026-63244

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass passw

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.

References

Published: 2026-10-23 · Source: NVD · Feed updated: 2026-10-23
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-23 via NVD.

Risk Timeline

CVE Disclosed2026-10-23 · -1 days ago

Remediation Resources

Official Advisory
www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155
vulnfeed aggregates 15176 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.