CVE-2026-110466— WisdomGarden｜Tronclass - Sensitive Data Exposure
Quick assessment
Affected
WisdomGarden Tronclass
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
由 WisdomGarden 开发的 Tronclass 存在敏感数据泄露漏洞。经过身份验证的远程攻击者可绕过匿名评分限制，获取匿名学生的信息。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| WisdomGarden | Tronclass | 1.77 |
affected |
1.78 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110466
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WisdomGarden｜Tronclass - Sensitive Data Exposure
Source: CVE Program / CVE List V5
Vulnerability Description
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
将系统数据暴露到未授权控制的范围
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WisdomGarden | Tronclass | 1.77 | - |
|
II. Public POCs for CVE-2026-110466
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110466
请登录查看更多情报信息。
Other References for CVE-2026-110466 (2)
-
台灣智園｜Tronclass - 存在3個漏洞-TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報 third-party-advisory
Same Patch Batch · WisdomGarden · 2026-10-14 · 3 CVEs total
| CVE-2026-110465 | 4.3 MEDIUM | WisdomGarden｜Tronclass - Insecure Direct Object Reference |
| CVE-2026-110467 | 4.3 MEDIUM | WisdomGarden｜Tronclass - Insecure Direct Object Reference |
IV. Related Vulnerabilities
Same product: Tronclass
-
CVE-2026-110467
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-110465
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-2997
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2025-10719
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2024-6738
WisdomGarden Tronclass - Broken Access Control
Same vendor: WisdomGarden
-
CVE-2026-110467
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-110465
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2026-2997
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2025-10719
WisdomGarden｜Tronclass - Insecure Direct Object Reference -
CVE-2024-6738
WisdomGarden Tronclass - Broken Access Control
Same weakness: CWE-497
-
CVE-2026-96948
Windows Client Side Caching driver (csc.sys) Information Dis -
CVE-2026-85866
Windows ALPC Information Disclosure Vulnerability -
CVE-2026-70260
Microsoft Trace Data Helper Information Disclosure Vulnerabi -
CVE-2026-70261
Microsoft Trace Data Helper Information Disclosure Vulnerabi -
CVE-2026-83907
Windows Hello Information Disclosure Vulnerability
V. Comments for CVE-2026-110466
No comments yet