CVE-2026-2997 – WisdomGarden｜Tronclass – Insecure Direct Object Reference

CVE ID : CVE-2026-2997

Published : Feb. 23, 2026, 1:55 a.m. | 1 hour, 9 minutes ago

Description : Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…