CVE-2026-63244 Authentication Bypass Vulnerability
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-63244?
CVE-2026-63244 is a critical vulnerability in WizLearn Technologies Pte. Ltd. Learning Management System, published on 23 Oct 2026.
Official description
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
Which versions are affected by CVE-2026-63244?
How do I fix CVE-2026-63244?
No fix has been published for CVE-2026-63244 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-63244 being exploited?
There is no known exploitation of CVE-2026-63244 in the wild and no public exploit code.
Sources
Also known as GHSA-6hr5-7mj9-8pm2.