TI-2026-27712 CVE-2026-35610
PolarLearn has a Server Action Admin Bypass in Account Management Actions
Priority HIGH 73
PolarLearn is a free and open-source learning program.
polarnl
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
polarnl records in CISA KEVNo polarnl vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Polarlearn · all components
TI-2026-20372 CVE-2026-25222
PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint
Priority MEDIUM 61
PolarLearn is a free and open-source learning program.
TI-2026-20925 CVE-2026-25885
PolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chats
Priority MEDIUM 49
PolarLearn is a free and open-source learning program.
TI-2026-20371 CVE-2026-25221
PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)
Priority MEDIUM 45
PolarLearn is a free and open-source learning program.
TI-2026-28311 CVE-2026-39322
PolarLearn: Any password authenticates banned accounts and grants API access
Priority MEDIUM 41
PolarLearn is a free and open-source learning program.
Priority LOW 31
PolarLearn is a free and open-source learning program.