polarnl PolarLearn

• CVE-2026-39322 High 8.8 PolarLearn: Any password authenticates banned accounts and grants API access 0.2%
• CVE-2026-35610 High 8.8 PolarLearn has a Server Action Admin Bypass in Account Management Actions 0.3%
• CVE-2026-25885 Critical 10.0 PolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chats 0.3%
• CVE-2026-25222 Medium 6.3 PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint 0.5%
• CVE-2026-25221 Low 2.3 PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google) 0.2%
• CVE-2026-25126 High 7.1 PolarLearn's unvalidated vote direction allows vote count manipulation 0.4%