Classroomio
Classroomio Security Releases - October 2026
classroomio-2026-10 Oct 1, 2026 Source: Vendor
Classroomio security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-111368
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-111368
BR2026-0000-032930
ClassroomIO
unclaimed
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other cour...
Credited as hieuPenguinnn
CVE-2026-111369
BR2026-0000-032931
ClassroomIO
unclaimed
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Auth...
Credited as hieuPenguinnn