Threats Tagged 'cve-2026-53636'
View all threats tagged with 'cve-2026-53636'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-53636'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-53636: CWE-294: Authentication Bypass by Capture-replay in openedx openedx-platformCVE-2026-53636 0 Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI (Learning Tools Interoperability) Provider implementation. The validate_timestamp_and_nonce function in lms/djangoapps/lti_provider/signature_validator.py does not validate OAuth nonces or timestamps, allowing an attacker who captures a valid LTI launch request to replay it an unlimited number of times without detection. This issue has been patched via commit 3a5ac85. Join the discussion | CVE Database V5 | 09/02/2026, 16:54:10 UTC Added: 09/02/2026, 17:07:58 UTC |
Showing 1 to 1 of 1 result