CVE-2026-30707

The SpeedExam Online Examination System (SaaS) (versions after v.FEV2026 ) is vulnerable to Broken Access Control within the ReviewAnswerDetails ASP.NET PageMethod . This flaw allows authenticated attackers to bypass client-side restrictions and directly invoke the method to retrieve the full ans...

CVE-2026-30707: Improper Access Control

An issue was discovered in SpeedExam Online Examination System SaaS after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The...