CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
LearnHouse Missing Authorization in Assignment API Vulnerability (CVE-2026-120199) Analysis & Mitigation Guide
[Affected Scope] LearnHouse versions prior to 1.1.1
[Impact] Authenticated users can exploit missing authorization checks to read other users' grades, submissions, and instructor feedback
[Mitigation] Immediately upgrade LearnHouse to version 1.1.1 or higher and enforce strict API access control policies