Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

polarnl vulnerabilities

6 published CVEs name polarnl among the affected products.

Newest CVEs

  • CVE-2026-39322

    PolarLearn: Any password authenticates banned accounts and grants API access

    polarnl · PolarLearn

    Critical9.2
  • CVE-2026-35610

    PolarLearn has a Server Action Admin Bypass in Account Management Actions

    polarnl · PolarLearn

    High8.8
  • CVE-2026-25885

    PolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chats

    polarnl · PolarLearn

    Critical10.0
  • CVE-2026-25222

    PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint

    polarnl · PolarLearn

    Medium6.3
  • CVE-2026-25221

    PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)

    polarnl · PolarLearn

    Low2.3
  • CVE-2026-25126

    PolarLearn's unvalidated vote direction allows vote count manipulation

    polarnl · PolarLearn

    High7.1