CVE-2026-63244
Last modified
CVE-2026-63244 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.
Description
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
Metrics
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-63244?
How severe is CVE-2026-63244?
How do I fix CVE-2026-63244?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-63239A hard-coded AWS IAM credentials vulnerability in Koollab LM…5.4
- CVE-2026-6324A flaw was found in libsoup. A remote attacker could exploit…4.8
- CVE-2026-63240An information disclosure vulnerability in Koollab LMS allow…4.3
- CVE-2026-63241An insecure direct object reference vulnerability in Koollab…3.1
- CVE-2026-63242A business logic vulnerability in Koollab LMS allowed an aut…4.3
- CVE-2026-63243An authentication vulnerability in the Bluetooth Low Energy …4.3
- CVE-2026-63248In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server …6.5
- CVE-2026-6325Out-of-bounds write in SetSuitesHashSigAlgo when processing …7.5
- CVE-2026-63252In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server tr…7.5
- CVE-2026-63259Authorization Bypass Through User-Controlled Key (CWE-639) i…4.3
- CVE-2026-63260Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
- CVE-2026-63261Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
Are you affected by CVE-2026-63244?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST