Live › vulnerability › CVE-2026-63244
Go to dashboardAuthentication bypass in the WizLearn LMS social login handler (Google/Facebook OAuth, /wizlearnlms/Login/Login.aspx). A crafted POST skips password and OAuth checks and can give admin access. WizLearn runs the platform itself and has already disabled social login and invalidated all sessions. No customer upgrade is documented.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised access to user accounts and full administrative control of the LMS platform.
This page as .md · .json · in your agent: get_signal("CVE-2026-63244")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.