Beveiligingsadvies

CVE-2026-30707

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-17 00:00:00

Laatst bijgewerkt 2026-04-23 15:31:21

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The provider states that this issue is "Fixed in [02/2026] backend service update."

← Alle CVE's bekijken Bekijk op cve.org ↗