← Database

CVE-2026-30368

MEDIUM CVSS: 5.4 Published: 2026-04-24 Modified: 2026-06-17

Description

A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices.

Affected Platforms

Unknown

Weakness Type

CWE-863

References