CVE-2026-42743
6.5 MEDIUMUnauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions
Published: 2026-06-15 · Last updated: 2026-06-15
Severity and scoring
- CVSS
- 6.5 MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CWE
- CWE-347
Description
Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.
Source: NVD
References
Related CVEs
Same CWE
- CVE-2026-48558 — SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authenticati... (10.0 CRITICAL)
- CVE-2026-50010 — Netty is a network application framework for development of protocol servers and clients (7.5 HIGH)
- CVE-2026-50634 — A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticate... (6.5 MEDIUM)
- CVE-2026-41005 — Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from th... (9.0 CRITICAL)
- CVE-2026-10795 — The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and incl... (8.1 HIGH)