A 19-year-old boy identifying as a cybersecurity researcher has claimed that the test website of the Central Board of Secondary Education’s (CBSE) On-Screen Marking (OSM) contained a hard-coded “master password” that could reportedly be used to surpass OTP verification, log into examiner accounts and also change the marks of students.&nbsp;The allegations were raised by Nisarga Adhikary, who told Hindustan Times that he identified the suspected vulnerability while reviewing the backend code of the OSM test website introduced this year for Class 12 board exams. However, the Central Board of Secondary Education clarified that the main evaluation portal had not been breached, stating that the issues pointed out by the teenager were limited to a testing platform containing only sample data.&nbsp;The issue gained wider attention after a Delhi student, Vedant Shrivastava, claimed that the Physics answer sheet uploaded under his roll number did not belong to him. His posts on social media quickly went viral, following which CBSE reportedly admitted in an email reviewed by Hindustan Times that a technical glitch had resulted in the upload of an incorrectly scanned answer sheet.&nbsp;Similarly, a Class 12 student identified as Sanjana has also claimed that her Chemistry answer sheet has exploded across social media. In a clip on X, she is seen holding her evaluated paper and pointing out what she claims are glaring discrepancies in marking.<h3>Embedded ‘Master password' in code</h3>Adhikary claimed that the portal's frontend JavaScript bundle reportedly contained a “literal password string” embedded directly in the code. He added that after going through the authentication flow, he discovered that the password could bypass security checks, directly opening the evaluation dashboard.&nbsp;“I started examining the special logic for username, password, and OTPs and how it's processed. When examining that, I found a master password,” he told Hindustan Times. “After a bit of reading the code, I saw that the master password can bypass all the security protocols and open the dashboard directly.”&nbsp;The teenager alleged that by using an examiner’s user ID and school code, details he claimed were publicly accessible, it was possible to access examiner accounts without completing the OTP authentication step.&nbsp;Nisarga Adhikary further claimed that the level of access was broad enough to permit modifications to answer-sheet evaluations as well as examiner-related information. He alleged that once logged into an examiner’s account, a user could edit answer sheets, access examiner details, and perform other actions on the portal.&nbsp;He also stated that he was able to enter evaluation dashboards and make changes linked to examiner profiles, including altering personal and banking information. When asked about the potential risks, Adhikary claimed that such a vulnerability could have been misused by malicious actors to manipulate marks and obtain sensitive data. “He or she could have extracted data on a large scale and sell them on the black market. He or she would have tampered with marks, changed the marks of people as they want to,” he claimed. Adhikary also accused the process of having flaws in the OTP system, password-reset process and access controls inside the portal. “So anyone could enter any rubbish thing in the old password thing and use anyone's user ID and put a new password to take over their account, which was really insecure, in my opinion,” he said. He also alleged that several internal dashboards were accessible without adequate security protections. According to Nisarga Adhikary, multiple broken access-control vulnerabilities allegedly allowed users to access or view sections and information they were not authorised to see.&nbsp;Also read: <a href="https://www.wionews.com/india-news/menstrual-hygiene-day-delhi-cm-rekha-gupta-focuses-on-hygiene-menstrual-awareness-campaigns-in-schools-1779975598656">Delhi CM Rekha Gupta focuses on hygiene, menstrual awareness campaigns in schools</a><h3>CBSE denied any allegations</h3>However, the Central Board of Secondary Education (CBSE) denied allegations that its active evaluation system had been breached. The board clarified that the portal used for evaluating answer sheets operated on a separate URL, which, according to CBSE, was neither compromised nor affected by the vulnerabilities mentioned in the social media posts.&nbsp;In response to it, Union Education Minister Dharmendra Pradhan addressed the controversy and claimed to take responsibility, assuring students and parents that "no one will be spared" if irregularities are found in the evaluation process. "I take responsibility. It will be fixed, and a solution will be found. We are all working on that task," he said.

Cybersecurity researcher Nisarga Adhikary, 19, claimed a CBSE test portal had a master password that bypassed OTPs, letting users alter student marks. CBSE denied any main system breach, stating the glitch was limited to a sample testing site. 

A 19-year-old boy identifying as a cybersecurity researcher has claimed that the test website of the Central Board of Secondary Education’s (CBSE) On-Screen Marking (OSM) contained a hard-coded “master password” that could reportedly be used to surpass OTP verification, log into examiner accounts and also change the marks of students. The allegations were raised by Nisarga Adhikary, who told Hindustan Times that he identified the suspected vulnerability while reviewing the backend code of the OSM test website introduced this year for Class 12 board exams. However, the Central Board of Secondary Education clarified that the main evaluation portal had not been breached, stating that the issues pointed out by the teenager were limited to a testing platform containing only sample data. The issue gained wider attention after a Delhi student, Vedant Shrivastava, claimed that the Physics answer sheet uploaded under his roll number did not belong to him. His posts on social media quickly went viral, following which CBSE reportedly admitted in an email reviewed by Hindustan Times that a technical glitch had resulted in the upload of an incorrectly scanned answer sheet. Similarly, a Class 12 student identified as Sanjana has also claimed that her Chemistry answer sheet has exploded across social media. In a clip on X, she is seen holding her evaluated paper and pointing out what she claims are glaring discrepancies in marking. Embedded ‘Master password' in code Adhikary claimed that the portal's frontend JavaScript bundle reportedly contained a “literal password string” embedded directly in the code. He added that after going through the authentication flow, he discovered that the password could bypass security checks, directly opening the evaluation dashboard. “I started examining the special logic for username, password, and OTPs and how it's processed. When examining that, I found a master password,” he told Hindustan Times. “After a bit of reading the code, I saw that the master password can bypass all the security protocols and open the dashboard directly.” The teenager alleged that by using an examiner’s user ID and school code, details he claimed were publicly accessible, it was possible to access examiner accounts without completing the OTP authentication step. Nisarga Adhikary further claimed that the level of access was broad enough to permit modifications to answer-sheet evaluations as well as examiner-related information. He alleged that once logged into an examiner’s account, a user could edit answer sheets, access examiner details, and perform other actions on the portal. He also stated that he was able to enter evaluation dashboards and make changes linked to examiner profiles, including altering personal and banking information. When asked about the potential risks, Adhikary claimed that such a vulnerability could have been misused by malicious actors to manipulate marks and obtain sensitive data. “He or she could have extracted data on a large scale and sell them on the black market. He or she would have tampered with marks, changed the marks of people as they want to,” he claimed. Adhikary also accused the process of having flaws in the OTP system, password-reset process and access controls inside the portal. “So anyone could enter any rubbish thing in the old password thing and use anyone's user ID and put a new password to take over their account, which was really insecure, in my opinion,” he said. He also alleged that several internal dashboards were accessible without adequate security protections. According to Nisarga Adhikary, multiple broken access-control vulnerabilities allegedly allowed users to access or view sections and information they were not authorised to see. Also read: Delhi CM Rekha Gupta focuses on hygiene, menstrual awareness campaigns in schools CBSE denied any allegations However, the Central Board of Secondary Education (CBSE) denied allegations that its active evaluation system had been breached. The board clarified that the portal used for evaluating answer sheets operated on a separate URL, which, according to CBSE, was neither compromised nor affected by the vulnerabilities mentioned in the social media posts. In response to it, Union Education Minister Dharmendra Pradhan addressed the controversy and claimed to take responsibility, assuring students and parents that "no one will be spared" if irregularities are found in the evaluation process. "I take responsibility. It will be fixed, and a solution will be found. We are all working on that task," he said.

Cybersecurity researcher Nisarga Adhikary, 19, claimed a CBSE test portal had a master password that bypassed OTPs, letting users alter student marks. CBSE denied any main system breach, stating the glitch was limited to a sample testing site.&nbsp;

Education system under threat? Questions raised over CBSE marking system after glitch found

The Central Board of Secondary Education (CBSE) has announced on Sunday (May 17) that students will now have to pay Rs 100 to obtain scanned copies of evaluated answer sheets and Rs 100 for verification of marks. Earlier, the process used to cost 700 rupees for the copy and Rs 500 for validation. The revised fee structure was introduced following concerns raised by students over high charges and the rollout of the On-Screen Marking (OSM) system after the announcement of Class 12 results. School Education Secretary Sanjay Kumar said the updated fee framework is intended to make the review process more accessible and transparent for students.<h3>School Education Secretary reacts to On-Screen Marking</h3>Speaking at a press conference in New Delhi, Kumar clarified that the On-Screen Marking system is not a new initiative. He said the CBSE had first introduced OSM in 2014, but its broader implementation was limited at the time due to technical and infrastructure constraints. Sanjay Kumar, Secretary, Department of School Education and Literacy, said, “The process that previously cost Rs 700 rupees, under which we provided you with a copy of your answer sheet, that fee has now been reduced to just Rs 100. Furthermore, the fee for validation, which previously stood at Rs 500, has also been brought down to Rs 100. So, for instance, if you wish to have the answer to a single question rechecked, you would need to pay Rs 225 rupees. However, if for any reason the re-evaluation process reveals that your marks have increased, we will refund the entire amount you paid back to you... We are more concerned about the well-being, welfare, and mental state of our children. Money is important, but it is not the priority in this particular matter...”

<blockquote class="twitter-tweet" data-media-max-width="560"><a href="https://twitter.com/hashtag/WATCH?src=hash&amp;ref_src=twsrc%5Etfw">#WATCH</a> | Delhi: Sanjay Kumar, Secretary, Department of School Education and Literacy, says, &quot;The process that previously cost Rs 700 rupees, under which we provided you with a copy of your answer sheet, that fee has now been reduced to just Rs 100. Furthermore, the fee for… <a href="https://t.co/uGx2Etacql">pic.twitter.com/uGx2Etacql</a>&mdash; ANI (@ANI) <a href="https://twitter.com/ANI/status/2055931974397862266?ref_src=twsrc%5Etfw">May 17, 2026</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

He added, "We will simply provide you with a copy of your answer sheet. By merely looking at the answer sheet, it will become evident how the marking was carried out. Once you review it, you may realise if there were instances where you should have been awarded higher marks. Since the answer sheets have already been scanned, I do not believe there is any need or any alternative method for further re-examination." CBSE also said that more than 13,000 answer sheets that could not be scanned because of ink-related or legibility issues were assessed manually.&nbsp;Also read: '<a href="https://www.wionews.com/india-news/-why-are-you-silent-rahul-gandhi-questions-pm-modi-demands-dharmendra-pradhan-s-resignation-over-neet-ug-row-1779013689787">Why are you silent?': Rahul Gandhi questions PM Modi, demands Dharmendra Pradhan’s resignation over NEET-UG row</a>

The updated fee structure was introduced in response to concerns voiced by students over high charges and the implementation of the On-Screen Marking (OSM) system after the declaration of Class 12 results.

The Central Board of Secondary Education (CBSE) has announced on Sunday (May 17) that students will now have to pay Rs 100 to obtain scanned copies of evaluated answer sheets and Rs 100 for verification of marks. Earlier, the process used to cost 700 rupees for the copy and Rs 500 for validation. The revised fee structure was introduced following concerns raised by students over high charges and the rollout of the On-Screen Marking (OSM) system after the announcement of Class 12 results. School Education Secretary Sanjay Kumar said the updated fee framework is intended to make the review process more accessible and transparent for students. School Education Secretary reacts to On-Screen Marking Speaking at a press conference in New Delhi, Kumar clarified that the On-Screen Marking system is not a new initiative. He said the CBSE had first introduced OSM in 2014, but its broader implementation was limited at the time due to technical and infrastructure constraints. Sanjay Kumar, Secretary, Department of School Education and Literacy, said, “The process that previously cost Rs 700 rupees, under which we provided you with a copy of your answer sheet, that fee has now been reduced to just Rs 100. Furthermore, the fee for validation, which previously stood at Rs 500, has also been brought down to Rs 100. So, for instance, if you wish to have the answer to a single question rechecked, you would need to pay Rs 225 rupees. However, if for any reason the re-evaluation process reveals that your marks have increased, we will refund the entire amount you paid back to you... We are more concerned about the well-being, welfare, and mental state of our children. Money is important, but it is not the priority in this particular matter...”

The updated fee structure was introduced in response to concerns voiced by students over high charges and the implementation of the On-Screen Marking (OSM) system after the declaration of Class 12 results.

CBSE reduces revaluation fees to Rs 100 after row over digital evaluation process

cbse-results-2026

Cbse Results 2026, News on Cbse Results 2026, stories on Cbse Results 2026, articles on Cbse Results 2026, Cbse Results 2026 stories at Wion, Cbse Results 2026 news, Cbse Results 2026 latest news

cbse results-2026

Education system under threat? Questions raised over CBSE marking system after glitch found

CBSE reduces revaluation fees to Rs 100 after row over evaluation process