tag
Service-Worker
High
Lightspeed Classroom Management Weak Authentication / Device Takeover — CVE-2026-30368
CVE-2026-30368·
Lightspeed Classroom Management (Chrome extension for school device management)
unpatched
Critical
BentoPDF Stored XSS to File Exfiltration (CVE-2026-41653)
CVE-2026-41653·
BentoPDF (self-hosted browser-side PDF toolbox)
patched