CVE-2026-35610: falha de alta gravidade em polarnl PolarLearn
PolarLearn has a Server Action Admin Bypass in Account Management Actions
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.3%
PolarLearn is a free and open-source learning program. In 0-PRERELEASE-14 and earlier, setCustomPassword(userId, password) and deleteUser(userId) in the account-management module used an inverted admin check. Because of the inverted condition, authenticated non-admin users were allowed to execute both actions, while real admins were rejected. This is a direct privilege-escalation issue in the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
polarnl · PolarLearnCVEs relacionadas — polarnl PolarLearn
No mesmo produto, das mais perigosas para as menos.
CVE-2026-25222MEDIUMPolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In EndpointEPSS 0.5%CVE-2026-25126HIGHPolarLearn's unvalidated vote direction allows vote count manipulationEPSS 0.4%CVE-2026-25885CRITICALPolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chatsEPSS 0.3%CVE-2026-39322CRITICALPolarLearn: Any password authenticates banned accounts and grants API accessEPSS 0.2%CVE-2026-25221LOWPolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)EPSS 0.2%