CVE-2026-30707

Published: Mar 17, 2026 Last Modified: Mar 17, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key

https://github.com/Maarckz/VulnReports/blob/main/CVE-2026-3…
https://github.com/Maarckz/VulnReports/blob/main/CVE-2026-30707.md
https://github.com/Maarckz/VulnReports/blob/main/SpeedExam%…
https://github.com/Maarckz/VulnReports/blob/main/SpeedExam%20%28SECOPS.GROUP%29…