Vulnerabilities

TI-2026-28311 CVE-2026-39322

PolarLearn: Any password authenticates banned accounts and grants API access

MEDIUM 41

PolarLearn is a free and open-source learning program.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00243 Published 2026-04-07 No fix listed CWE-287

TI-2026-27712 CVE-2026-35610

HIGH 73

PolarLearn is a free and open-source learning program.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0031 Published 2026-04-07 No fix listed CWE-285

TI-2026-20925 CVE-2026-25885

MEDIUM 49

PolarLearn is a free and open-source learning program.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0034 Published 2026-02-09 Fixed in 0-PRERELEASE-16 CWE-285

TI-2026-20372 CVE-2026-25222

MEDIUM 61

PolarLearn is a free and open-source learning program.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00458 Published 2026-02-02 No fix listed CWE-200

TI-2026-20371 CVE-2026-25221

MEDIUM 45

PolarLearn is a free and open-source learning program.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00231 Published 2026-02-02 No fix listed CWE-352

TI-2026-20289 CVE-2026-25126

LOW 31

PolarLearn is a free and open-source learning program.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00376 Published 2026-01-29 Fixed in 0-PRERELEASE-15 CWE-20