{"id":"CVE-2026-63244","published":"2026-10-23T08:16:55.320","lastModified":"2026-10-23T19:57:42.660","description":"An authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow an unauthenticated remote attacker to bypass password\nauthentication and the OAuth authentication flow by sending a specially crafted\nPOST request, potentially resulting in unauthorised access to user accounts and\nfull administrative control of the LMS platform.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated remote attacker can bypass password and OAuth authentication in WizLearn LMS by sending a specially crafted POST request, gaining unauthorized access to user accounts and full administrative control.","exploitability":"Highly exploitable due to lack of authentication requirements and simple request manipulation; no prior access or user interaction needed.","blast_radius":"Complete compromise of the LMS platform including data exfiltration, account takeover, and full system control across all users and administrators.","remediation":"Upgrade to WizLearn LMS version 2.590 or later, as this is the fixed version specified in the vendor advisory.","detection":"Look for POST requests to authentication-related endpoints (e.g., /login, /oauth/token) that succeed without valid credentials—specifically, responses returning 200 OK with session tokens or user data despite missing or malformed authentication headers/body. Also monitor for anomalous admin-level API calls from previously unauthenticated sessions.","tags":["auth-bypass","web","lms","admin-access","oauth","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:59:52.867Z"}}