HEL Online Classroom: AI-powered Online Classrooms — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in HEL Online Classroom: AI-powered Online Classrooms, with AI-generated Chinese analysis, references, and POCs.

Vendor: higheredlab

CVE ID	Title	CVSS	Severity	Published
CVE-2026-77007	HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure	-	-	2026-08-29
CVE-2026-77008	HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update	-	-	2026-08-29
CVE-2026-77010	HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass	-	-	2026-08-29
CVE-2026-6708	HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Classroom Deletion via 'id' Parameter CWE-862	5.3	Medium	2026-05-12

All 4 known CVE vulnerabilities affecting HEL Online Classroom: AI-powered Online Classrooms with full Chinese analysis, references, and POCs where available.