CVE-2026-41243: Siemvk Openlearn

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when `safeMode` is enabled, unapproved forum posts are hidden from the public list, but the direct post-read procedure still returns the full post to anyone with the post UUID. Commit 844b2a40a69d0c4911580fe501923f0b391313ab fixes the issue.

Affected products

• Siemvk Openlearn: before 2026-04-14 (fixed in 2026-04-14)

Published 2026-04-23. Last modified 2026-06-17.