Lightspeed vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lightspeed products: 1 record(s), with severity, exploitation and fixes.

Lightspeed Classroom 1

Exploited only (KEV) →

CVE-2026-30368 Medium · 5.4 CWE-863 Apr 24, 2026

Incorrect Authorization in Lightspeed Lightspeed Classroom

A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices.