CVE-2026-63244: Authentication Bypass Vulnerability
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
Affected Software
Event History
Frequently Asked Questions
Does an attacker need valid credentials or user interaction to exploit this issue?
No. The reported attack vector is network-based and requires neither privileges nor user interaction; exploitation involves a specially crafted POST request.
Which product versions or configurations are known to be affected?
The available information identifies WizLearn Technologies Learning Management System but does not specify affected versions, deployment configurations, or whether default installations are affected.
Are detection methods or temporary mitigations available if patching cannot be performed immediately?
The available information does not provide indicators of compromise, logging guidance, or temporary mitigation measures.