CVE-2026-24670: Gunet Open Eclass Platform

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated students to create new course units, an action normally restricted to higher-privileged roles. This issue has been patched in version 4.2.

Affected products

• Gunet Open Eclass Platform: before 4.2 (fixed in 4.2)

Published 2026-02-03. Last modified 2026-06-17.