CVE-2021-43136: Formalms

Critical severity, CVSS 9.8. EPSS: 15.7% chance of exploitation in the next 30 days.

An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform.

Affected products

  • Formalms Formalms: up to and including 2.4.4

Published 2021-11-10. Last modified 2026-06-17.