CVE-2026-24673: Gunet Open Eclass Platform

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, a file upload validation bypass vulnerability allows attackers to upload files with prohibited extensions by embedding them inside ZIP archives and extracting them using the application’s built-in decompression functionality. This issue has been patched in version 4.2.

Affected products

• Gunet Open Eclass Platform: before 4.2 (fixed in 4.2)

Published 2026-02-03. Last modified 2026-06-17.