https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:55:48.850492+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24667 CVE-2026-24667 — Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access 2026-10-07T03:55:48.867001+00:00

Affected: gunet openeclass

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, failure to invalidate active user sessions after a password change allows existing session tokens to remain valid, potentially enabling unauthorized continued access to user accounts. This issue has been patched in version 4.2.