CVE-2026-110465— WisdomGarden｜Tronclass - Insecure Direct Object Reference
Quick assessment
Affected
WisdomGarden Tronclass
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| WisdomGarden | Tronclass | 1.77 |
affected |
1.78 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110465
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WisdomGarden｜Tronclass - Insecure Direct Object Reference
Source: CVE Program / CVE List V5
Vulnerability Description
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WisdomGarden | Tronclass | 1.77 | - |
|
II. Public POCs for CVE-2026-110465
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110465
请登录查看更多情报信息。
Other References for CVE-2026-110465 (2)
-
台灣智園｜Tronclass - 存在3個漏洞-TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報 third-party-advisory
Same Patch Batch · WisdomGarden · 2026-10-14 · 3 CVEs total
| CVE-2026-110466 | 4.3 MEDIUM | WisdomGarden｜Tronclass - Sensitive Data Exposure |
| CVE-2026-110467 | 4.3 MEDIUM | WisdomGarden｜Tronclass - Insecure Direct Object Reference |
IV. Related Vulnerabilities
Same product: Tronclass
-
CVE-2026-110467
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-110466
WisdomGarden｜Tronclass - Sensitive Data Exposure -
CVE-2026-2997
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2025-10719
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2024-6738
WisdomGarden Tronclass - Broken Access Control
Same vendor: WisdomGarden
-
CVE-2026-110467
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-110466
WisdomGarden｜Tronclass - Sensitive Data Exposure -
CVE-2026-2997
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2025-10719
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2024-6738
WisdomGarden Tronclass - Broken Access Control
Same weakness: CWE-639
-
CVE-2026-44084
Access Code Forgery in Video Station leading to unauthorized -
CVE-2026-108092
Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated -
CVE-2026-110853
n8n before 1.123.83 Authorization Bypass via Execute Sub-wor -
CVE-2026-110851
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership T -
CVE-2026-110841
n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent C
V. Comments for CVE-2026-110465
No comments yet