Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 23, 2026 · NIST NVD

   Detected

   Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.

2. Jun 17, 2026 · NIST NVD

   Updated

   Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.

Sources

• CVE.orgVulnerability recordCVE-2026-2997

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-2997

  Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.

  nvd.nist.gov

References

• Reference · twcert.org.tw
• Reference · twcert.org.tw