[ Vendor · 2 CVEs ]

classroomio

CVEs affecting classroomio published in the last 30 days, plus any classroomio CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-111369 15 Oct 2026 CVSS 7.1 ClassroomIOClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course…
CVE-2026-111368 15 Oct 2026 CVSS 6.4 ClassroomIOClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course…