CVE-2026-30707 - Vulnerability Analysis

Overview

SpeedExam Online Examination System (SaaS) > v.FEV2026 contains a broken access control caused by insufficient server-side authorization in ReviewAnswerDetails ASP.NET PageMethod, letting authenticated attackers retrieve full answer keys by bypassing client-side restrictions.

Severity & Score

Impact

Authenticated attackers can retrieve full answer keys, compromising exam integrity and confidentiality.

Mitigation

Update to the latest version with proper server-side authorization checks.

References

• https://github.com/Maarckz/VulnReports/blob/main/CVE-2026-30707.md
• https://github.com/Maarckz/VulnReports/blob/main/SpeedExam%20%28SECOPS.GROUP%29.md

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 18, 2026

🟠 CVE-2026-30707 - High (8.1) An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this meth... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30707/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner