{"id":"CVE-2026-63244","title":"Authentication Bypass Vulnerability","summary":"An authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow an unauthenticated remote attacker to bypass password\nauthentication and the OAuth authentication flow by sending a specially c…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"WizLearn Technologies Pte. Ltd.","product":"Learning Management System","affected":["learning_management_system"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T07:24:30.089Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63244","references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T08:19:41.042Z","slug":"CVE-2026-63244","body":"## Overview\n\nAn authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow an unauthenticated remote attacker to bypass password\nauthentication and the OAuth authentication flow by sending a specially crafted\nPOST request, potentially resulting in unauthorised access to user accounts and\nfull administrative control of the LMS platform.\n\n## Affected\n\n- `learning_management_system`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}