CVE-2026-110466: WisdomGarden｜Tronclass - Sensitive Data Exposure

Published Oct 14, 2026

Updated

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.

Affected Software

1 affected component

WisdomGarden Tronclass

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WisdomGarden Tronclass to a version that resolves this vulnerability.
Fixed in 1.77.123590-hotfix
Upgrade
Upgrade WisdomGarden Tronclass to a version that resolves this vulnerability.
Fixed in 1.78.123589-hotfix

Event History

Oct 14, 2026

CVE Published

via MITRE·06:29 AM

Data Sourced

via MITRE·06:29 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to Tronclass and able to access it remotely. No user interaction is required.

What information could be exposed?

The vulnerability allows an authenticated attacker to bypass anonymous grading restrictions and obtain anonymous student information. The provided data rates the confidentiality impact as low and does not identify integrity or availability impact.

Does this affect unauthenticated users by default?

The provided data indicates that privileges are required for exploitation, so unauthenticated attackers are not described as able to exploit it.