PT-2026-40591 · Th30D4Y+2 · Openlearn

Krrazee · CVE-2026-44720 · Published 2026-05-13 · Updated 2026-05-28

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions OpenLearnX versions prior to 2.0.4

Description An authentication issue in this open-source, decentralized learning and assessment platform could allow unauthorized access to user accounts under specific conditions.

Recommendations Update to version 2.0.4.

Exploit

Fix

Improper Verification of Cryptographic Signature

Improper Authentication

Weakness Enumeration

CWE-347

CWE-287

Related Identifiers

CVE-2026-44720

GHSA-223G-F5MQ-GW33

Affected Products

Openlearn

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44720.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-44720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44720 · Security Note
• https://osv.dev/vulnerability/GHSA-223g-f5mq-gw33 · Vendor Advisory
• https://github.com/th30d4y/OpenLearnX/security/advisories/GHSA-223g-f5mq-gw33 · Note
• https://github.com/th30d4y/OpenLearnX/releases/tag/v2.0.4 · Note
• https://github.com/th30d4y/OpenLearnX · Note
• https://t.me/cveNotify/164952 · Telegram Post
• https://t.me/CVEtracker/55184 · Telegram Post