Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The provider states that this issue is "Fixed in [02/2026] backend service update."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-17 | 2 | Disclosure2 |
| 2026-03-18 | 1 | Disclosure1 |
CVE-2026-30707 An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails http://ASP.NET PageMethod.… https://www.cve.org/CVERecord?id=CVE-2026-30707
Post summary
The text announces CVE-2026-30707 as a broken access control issue in SpeedExam Online Examination System, providing a link to its CVE record but no further details.
🟠 CVE-2026-30707 - High An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails http://ASP.NET PageMethod. Authenticated attackers ... https://www.thehackerwire.com/vulnerability/CVE-2026-30707/ https://t.co/odGMMvr7Im
Post summary
High‑severity broken access control vulnerability in SpeedExam Online Examination System, enabling authenticated attackers to invoke a PageMethod; no PoC, exploit code, or active exploitation noted.
CVE-2026-30707 Broken Access Control in SpeedExam Online Examination System via ReviewAnswerDetails PageMethod https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30707
Post summary
This text announces a broken access control vulnerability (CVE‑2026‑30707) in SpeedExam's ReviewAnswerDetails page method, but does not provide any evidence of exploitation, PoC, or remedial action.