THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-30368 (MEDIUM 5.4) — A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devi

[NVD] CVE-2026-30368 (MEDIUM 5.4) — A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devi

lownvdPublished 2026-04-24

CVE-2026-30368 CVSS: 5.4 MEDIUM Published: 2026-04-24T16:16:34.993

A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices.

Indicators of compromise

CVE-2026-30368cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-30368