CVE-2026-2997: Wisdomgarden Tronclass

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. After obtaining a course ID, authenticated remote attackers to modify a specific parameter to obtain a course invitation code, thereby joining any course.

Affected products

• Wisdomgarden Tronclass: up to and including 1.74

Published 2026-02-23. Last modified 2026-06-17.