CVE-2026-41243

MEDIUM 5.4CVE-2026-41243 · Published 23/04/2026 · updated 26/10/2026

In short

CVE-2026-41243 is a MEDIUM (CVSS 5.4) vulnerability affecting openlearn (siemvk).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.3% of all vulnerabilities.
Fix: update to 2026-04-14 or later.

Package	Affected versions	Patched versions
openlearn siemvk	`< 2026-04-14`	`2026-04-14`

Description

OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from the public list, but the direct post-read procedure still returns the full post to anyone with the post UUID. Commit 844b2a40a69d0c4911580fe501923f0b391313ab fixes the issue.

References

siemvk/OpenLearn commit 844b2a4 · Patch
siemvk/OpenLearn security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free