CVE-2026-63244
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Oct 23, 2026
Vendor
unknown
Description
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.