Vulnerability · Published Oct 23, 2026 · Assigned by CSA

CVE-2026-63244Authentication Bypass Vulnerability

Critical 9.8

In plain English

A critical-severity improper authentication in Learning Management System from WizLearn Technologies Pte. Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.6%top 48.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.

Affected products (as reported)

Vendor	Product	Versions
WizLearn Technologies Pte. Ltd.	Learning Management System	see references

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155