CRITICAL
WizLearn Technologies Pte. Ltd.
CVE published 2026-10-23
CVE-2026-63244
A critical authentication bypass vulnerability exists in WizLearn Technologies' Learning Management System (LMS). An unauthenticated remote attacker could potentially bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, allowing unauthorized access to user accounts and full administrative control of the LMS platform.