CVE-2026-63244
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System…
- Risk score
- 73/100
- CVSS
- 9.8 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 23 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) allows an unauthenticated remote attacker to bypass password authentication and OAuth flow, potentially resulting in unauthorized access to user accounts and full administrative control.
- Affected
- {'products': ["WizLearn Technologies' Learning Management System (LMS)"], 'packages': [], 'versions': []}
- Fix
- Check the linked advisory for a fix, as none is specified.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
Last activity 23 Oct 2026. Patch Forecast updates every hour.