CVE-2026-30707

HIGH

An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can by...

Affects 0 products across 5 vendors.

CVSS 3.18.1
EPSS0.5%
Percentile38th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, no availability impact.
CWE Weakness Definitions
CWE-284: Improper Access Control

Software does not restrict or incorrectly restricts access to a resource.

Related Attack Patterns (CAPEC)
CAPEC-478 Modification of Windows Service Configuration
via CWE-284
CAPEC-479 Malicious Root Certificate
via CWE-284
CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment
via CWE-284
CAPEC-550 Install New Service
via CWE-284
CAPEC-551 Modify Existing Service
via CWE-284
Show all 17

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A Broken Access Control vulnerability in SpeedExam Online Examination System (SaaS) allows authenticated attackers to bypass client-side restrictions and access the full answer key via the ReviewAnswerDetails ASP.NET PageMethod.

BSID: BS-2026-GLOBAL-079771-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-30707?
A Broken Access Control vulnerability in SpeedExam Online Examination System (SaaS) allows authenticated attackers to bypass client-side restrictions and access the full answer key via the ReviewAnswerDetails ASP.NET PageMethod.
What is the CVSS score for CVE-2026-30707?
CVE-2026-30707 has CVSS 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS: 0.5%.
Is CVE-2026-30707 actively exploited?
No confirmed active exploitation of CVE-2026-30707 as of 2026-05-30.
How do I remediate CVE-2026-30707?
Priority: HIGH.
What systems are affected by CVE-2026-30707?
CVE-2026-30707 affects Answer; Client; Full; Retrieve; Saas.
Vulnerability Details
CVE IDCVE-2026-30707
BSIDBS-2026-GLOBAL-079771-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published2026-03-17
Last Modified2026-05-19
ICS Relevance15%
Weakness (CWE)
Improper Access Control
SourceNVD
Official Description

An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026. It allows Broken Access Control via the ReviewAnswerDetails ASP.NET PageMethod. Authenticated attackers can bypass client-side restrictions and invoke this method directly to retrieve the full answer key. The provider states that this issue is "Fixed in [02/2026] backend service update."

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Authenticated attackers can exploit this vulnerability by directly invoking the ReviewAnswerDetails ASP.NET PageMethod, which is not properly restricted on the server side, leading to unauthorized access to the full answer key.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Answer — —
Client — —
Full — —
Retrieve — —
Saas — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 212 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hasha8c415ed92f9df9ed70557c6dfe07aa7327369e57bae3af740772e7e541067265ae4d756b05e396ffd17f1ac1699be03eae892338611f9efb0298285a7a9ecfa
Related CVEs affecting Answer
CVE-2023-0744 9.8 Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4. CVE-2023-1537 9.8 Authentication Bypass by Capture-replay in GitHub repository answerdev/answer... CVE-2026-4365 9.1 The LearnPress plugin for WordPress is vulnerable to unauthorized data deleti... CVE-2023-0741 9.0 Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior ... CVE-2023-0743 9.0 Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer pr...
View all Answer CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →