CVE-2026–41505: How a Two-Letter Import Broke Authentication Security in an Open-Source LMS

CVE: CVE-2026–41505
Severity: High (CVSS 8.7)
CWE: CWE-338 — Use of Cryptographically Weak Pseudo-Random Number Generator
Advisory…