PatchSiren

WizLearn Technologies Pte. Ltd. CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL WizLearn Technologies Pte. Ltd. CVE published 2026-10-23

CVE-2026-63244

A critical authentication bypass vulnerability exists in WizLearn Technologies' Learning Management System (LMS). An unauthenticated remote attacker could potentially bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, allowing unauthorized access to user accounts and full administrative control of the LMS platform.