{"id":"CVE-2026-63244","revision":"a7ca55d3d279496987cbdb59b682a81c","records":[{"revision":"a7ca55d3d279496987cbdb59b682a81c","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-63244","aliases":[],"title":"Authentication Bypass Vulnerability","description":"An authentication\nbypass vulnerability in WizLearn Technologies' Learning Management System (LMS)\ncould allow an unauthenticated remote attacker to bypass password\nauthentication and the OAuth authentication flow by sending a specially crafted\nPOST request, potentially resulting in unauthorised access to user accounts and\nfull administrative control of the LMS platform.","state":0,"publishedAt":"2026-10-23T07:24:30.089+00:00","modifiedAt":"2026-10-23T07:24:30.089+00:00","affected":[{"ecosystem":"Vendor product","name":"Learning Management System","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WizLearn Technologies Pte. Ltd.\",\n                    \"product\": \"Learning Management System\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unaffected\",\n                            \"version\": \"N.A\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-155"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63244","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-63244","identifiers":["CVE-2026-63244"]},"retained":false,"historicalAffected":[]}],"coverage":[]}