CVE-2026-24664: Gunet Open Eclass Platform

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a username enumeration vulnerability allows unauthenticated attackers to identify valid user accounts by analyzing differences in the login response behavior. This issue has been patched in version 4.2.

Affected products

• Gunet Open Eclass Platform: before 4.2 (fixed in 4.2)

Published 2026-02-03. Last modified 2026-06-17.