Indian Exam Board Admits to Cybersecurity Flaws Found by Teen Researcher

India's Central Board of Secondary Education (CBSE) has formally acknowledged security vulnerabilities within its digital evaluation portal, following a disclosure by a 19-year-old cybersecurity researcher [1, 2].[1][2]

The identified flaws were severe enough that they could have potentially allowed unauthorized individuals to gain access to the accounts of official examiners. Such access could theoretically permit bad actors to view or alter sensitive grading data before results were finalized [3, 4].[3][4]

Upon receiving the responsible disclosure from the teen researcher, the CBSE investigated the claims and confirmed the existence of the cybersecurity gaps. The board's prompt acknowledgment highlights a growing recognition of the importance of independent security audits in public sector digital infrastructure [5].[5]

As educational institutions globally accelerate the digitization of their administrative and evaluation processes, the attack surface for potential data breaches continues to expand. The CBSE portal serves as a critical node in the Indian education system, handling the academic records of millions of secondary and higher secondary students [6].[6]

This incident underscores the critical role that ethical hackers and independent researchers play in fortifying national digital assets. By identifying and reporting these vulnerabilities before they could be maliciously exploited, the researcher prevented a potential crisis of confidence in the national examination system [1, 5].[1][5]