CVE-2026-63244criticalCWE-287

CVE-2026-63244: falha crítica em WizLearn Technologies Pte. Ltd.

Authentication Bypass Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Learning Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.6%
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
WizLearn Technologies Pte. Ltd. · Learning Management System