Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2 days ago6 views

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 10:16 p.m.11 views

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/27 9:2 p.m.24 views

CVE-2026-44720 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS0.00025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 9:2 p.m.2 views

CVE-2026-44720 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:2 p.m.5 views

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/05/27 9:2 p.m.9 views

CVE-2026-44720

OpenLearnX (pre-2.0.4) has a critical authentication vulnerability where JWT signature verification is disabled, enabling an attacker to bypass authentication and take over user accounts. Impact is unauthorized access under specific conditions; the issue is fixed in 2.0.4. Remediation: upgrade to...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/27 9:2 p.m.5 views

EUVD-2026-32669

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

OpenLearnX 数据伪造问题漏洞

OpenLearnX is a decentralized adaptive learning and evaluation platform developed by th30d4y. Versions of OpenLearnX prior to 2.0.4 had a data manipulation vulnerability, which stemmed from a critical authentication flaw. This vulnerability could allow unauthorized access to user accounts under...

6.9CVSS5.7AI score0.00025EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/05/13 1:39 a.m.7 views

OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

Overview A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. The issue has been fixed. Advisory: https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References3Affected Software1
Snyk
Snyk
added 2026/05/13 1:39 a.m.3 views

Improper Verification of Cryptographic Signature

Overview openlearnx is an OpenLearnX is an AI-powered learning platform with adaptive quizzes, coding practice, course tracking, and dashboard analytics. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the JWT signature verification process...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/05/13 1:39 a.m.6 views

NPM: OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

NPM: OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover vulnerability discovered by ? in WordPress Npm openlearnx versions 2.0.4...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/05/13 1:39 a.m.3 views

GHSA-223G-F5MQ-GW33 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

Overview A critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. The issue has been fixed. Advisory: https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.7 views

PT-2026-40591

Name of the Vulnerable Software and Affected Versions OpenLearnX versions prior to 2.0.4 Description An authentication issue in this open-source, decentralized learning and assessment platform could allow unauthorized access to user accounts under specific conditions. Recommendations Update to...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References6
NVD
NVD
added 2026/05/08 4:16 a.m.6 views

CVE-2026-41900

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution RCE vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in...

10CVSS0.00168EPSS
Exploits1References3
CVE
CVE
added 2026/05/08 3:25 a.m.4 views

CVE-2026-41900

OpenLearnX (pre-2.0.3) contains a critical remote code execution (RCE) via the code execution sandbox, enabling sandbox escape and arbitrary commands. The issue is mitigated by upgrading to version 2.0.3 (patched in GHSA-8h25-q488-4hxw and related advisories). Public materials describe an unauthe...

10CVSS6.5AI score0.00168EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/05/08 3:25 a.m.23 views

CVE-2026-41900 OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution RCE vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in...

8.8CVSS0.00168EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 3:25 a.m.3 views

CVE-2026-41900

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution RCE vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in...

8.8CVSS6.5AI score0.00168EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/08 3:25 a.m.6 views

CVE-2026-41900 OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution RCE vulnerability was identified in the OpenLearnX code execution environment, allowing sandbox escape and arbitrary command execution. This issue has been patched in...

8.8CVSS6.5AI score0.00168EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

OpenLearnX 操作系统命令注入漏洞

OpenLearnX is a decentralized adaptive learning and evaluation platform developed by th30d4y. Versions of OpenLearnX prior to 2.0.3 contained a vulnerability related to operating system command injection. This vulnerability stemmed from a sandbox escape in the code execution environment, which...

10CVSS6.5AI score0.00168EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2026/05/06 7:7 p.m.43 views

Exploit for CVE-2026-41900

OpenLearnX-RCE OpenLearnX Unauthenticated RCE via Contai...

6.2AI score0.00168EPSS
Exploits1
Rows per page
Query Builder