Security Advisory

CVE-2026-30707

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-17 00:00:00

Last updated 2026-04-23 15:31:21

Assigner mitre

State PUBLISHED

Description

An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The provider states that this issue is "Fixed in [02/2026] backend service update."

← Browse all CVEs View on cve.org ↗