CVE-2026-110467: WisdomGarden Tronclass Insecure Direct Object Reference Vulnerability. This medium-severity vulnerability allows authenticated remote attackers to access sensitive student data by modifying a specific parameter. System administrators and security teams should assess their exposure, verify versions, and update or implement necessary controls to prevent exploitation. The vulnerability has a [truncated]
CVE-2026-110466 is a Sensitive Data Exposure vulnerability in WisdomGarden's Tronclass. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information. The CVSS score is 5.3, and the severity is MEDIUM. This vulnerability affects Tronclass deployments, and defenders should assess exposure and prioritize verification and remediation efforts. The vulnerabil [truncated]
CVE-2026-110465: WisdomGarden Tronclass Insecure Direct Object Reference vulnerability allows authenticated remote attackers to modify peer review scores of any student. This medium-severity vulnerability affects Tronclass deployments with student peer review functionality. Defenders should assess exposure and prioritize patching or mitigating this vulnerability to prevent potential data integrity issues [truncated]
