---
id: CVE-2026-63244
title: Authentication Bypass Vulnerability
summary: >-
  An authentication

  bypass vulnerability in WizLearn Technologies' Learning Management System
  (LMS)

  could allow an unauthenticated remote attacker to bypass password

  authentication and the OAuth authentication flow by sending a specially c…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: WizLearn Technologies Pte. Ltd.
product: Learning Management System
affected:
  - learning_management_system
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T07:24:30.089Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63244'
references:
  - url: 'https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155'
tags:
  - cve.org
ingestedAt: '2026-10-23T08:19:41.042Z'
---

## Overview

An authentication
bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)
could allow an unauthenticated remote attacker to bypass password
authentication and the OAuth authentication flow by sending a specially crafted
POST request, potentially resulting in unauthorised access to user accounts and
full administrative control of the LMS platform.

## Affected

- `learning_management_system`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.