???? A Teen Hacker Found a Massive CBSE Security Hole. Nobody Fixed It.

Thanks! Share it with your friends!

You disliked this video. Thanks for the feedback!

Added 3 months ago by McDan

12 Views

In February 2026, a 19-year-old ethical hacker named Nisarga Adhikary discovered critical vulnerabilities in CBSE's newly deployed OnMark evaluation portal.

What began as a routine security assessment soon revealed something far more alarming.

According to his findings, the platform contained severe security flaws, including a hardcoded master password, exposed cloud storage resources, and access pathways that allegedly exposed millions of student records and digital answer sheets. Nisarga responsibly disclosed these vulnerabilities to India's national cybersecurity agency, CERT-In.

The report was acknowledged.

But the vulnerabilities remained unpatched for months.

This video reconstructs the story of how a teenager discovered security weaknesses affecting one of India's largest educational systems, what exactly was exposed, how the disclosure process unfolded, and why the incident has raised serious questions about cybersecurity governance, data sovereignty, vendor accountability, and institutional response mechanisms.

Topics Covered:

• What is the CBSE OnMark Portal?
• How the vulnerabilities were discovered
• The alleged exposure of 9.3 million student records
• Access to answer sheets and cloud infrastructure
• The role of CERT-In in India's cybersecurity framework
• Data sovereignty concerns and cloud security practices
• Responsible disclosure vs institutional inaction
• Lessons for public-sector cybersecurity in India

This is not merely a story about a data breach.

It is a story about responsible disclosure, public trust, and what happens when warnings are ignored.

If you found this analysis useful, consider subscribing for more content on governance, technology, cybersecurity, public policy, and current affairs.

#CBSE #CERTIn #CyberSecurity #DataBreach #EthicalHacking #NisargaAdhikary #OnMark #IndiaCyberSecurity #CBSEExam #DataPrivacy #CyberAttack #DigitalIndia #InformationSecurity