CVE-2026-63244
CRITICAL
9,8
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
An authentication
bypass vulnerability in WizLearn Technologies' Learning Management System (LMS)
could allow an unauthenticated remote attacker to bypass password
authentication and the OAuth authentication flow by sending a specially crafted
POST request, potentially resulting in unauthorised access to user accounts and
full administrative control of the LMS platform.
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155