CBSE OSM Portal Security Breach: What Students and Parents Need to Know
A 19-year-old ethical hacker exposed vulnerabilities in CBSE's digital evaluation system. CBSE responded, but questions about security and transparency remain as students face answer sheet mismatches.
AC Team
The Central Board of Secondary Education (CBSE) found itself in hot water after a 19-year-old student claimed he could access parts of the board's digital evaluation system. The student, Nisarga Adhikary, raised concerns about security holes in the On-Screen Marking (OSM) portal that CBSE uses to evaluate Class 12 answer sheets.
This isn't just tech talk. For students who appeared for their Class 12 exams this year, these claims hit close to home. The OSM system was introduced for the first time this year, and now questions are being asked about whether student data is safe.
What Did the Student Claim?
Nisarga Adhikary took to social media platform X and wrote a detailed blog post explaining what he found. According to him, he could bypass parts of the login system and access controls on the CBSE OSM portal. He claimed he had reported these problems months earlier to CERT-In, India's computer emergency response team.
The claims spread fast. Parents, students, teachers, and cybersecurity experts started talking about whether the digital system used to check lakhs of answer sheets was actually secure.
How CBSE Responded
CBSE issued a clarification on X. The board said the website Adhikary mentioned (cbse.onmark.co.in) was only a testing platform. According to CBSE, this portal contained sample data used for demos and reviews. No actual student marks, answer sheets, or sensitive exam data were stored there.
The board insisted that the real evaluation system remained secure and that no breach had occurred where it mattered.
But Adhikary wasn't convinced. He responded publicly, saying he had screen recordings and proof that production user credentials could access the system. He also pointed out that several other domains linked to the OnMark system showed similar weaknesses.
The Bigger Picture: Answer Sheet Mismatches
This security row comes at a tricky time for CBSE. The board is already dealing with complaints about the re-evaluation process. Over 4 lakh students have applied to see scanned copies of their evaluated answer sheets. That's more than 11 lakh answer books requested.
Some students who received their scanned copies noticed something strange. A Class 12 student named Vedant claimed on social media that the handwriting in his Physics answer sheet didn't match his own. Other students raised similar concerns.
CBSE acknowledged these mismatches. The board said it would send correct answer sheets to affected students via email and update results where needed.
Imagine studying hard for your board exams, only to find out the answer sheet uploaded under your roll number belongs to someone else. That's the reality some students faced.
What Happens Next?
The Union Education Minister announced that technical experts from IIT Madras and IIT Kanpur would help CBSE strengthen the OSM portal. This move signals that the government is taking the concerns seriously.
For now, CBSE has stated that around 9 lakh answer books have been provided to students, with pending requests expected to be cleared soon.
Why This Matters
Digital systems are supposed to make things easier and more transparent. CBSE moved to the OSM system to speed up evaluation and reduce errors. But when questions arise about security and accuracy, trust takes a hit.
Students and parents need to know their data is safe. When a teenager can point out security flaws, it raises valid questions about how thoroughly these systems are tested before they go live.
The debate isn't just about one portal or one student's claims. It's about how India handles large-scale digital infrastructure for education. Lakhs of students depend on these systems. Their futures, in many ways, rest on marks calculated and stored digitally.
What Students Should Do
If you've applied for answer sheet verification, keep checking your registered email. CBSE has said it will send corrected copies where mismatches occurred.
If you notice any problems with your answer sheet, document everything. Take screenshots, note down dates, and reach out to CBSE through official channels.
Stay updated through CBSE's official website and social media handles. Avoid panic, but stay informed.
The involvement of IIT experts is a positive step. It shows that technical gaps are being addressed. But the question remains: should these gaps have existed in the first place?
As digital evaluation becomes the norm, boards like CBSE need to invest not just in technology, but in robust security testing. Ethical hackers like Adhikary actually do the system a favour by pointing out flaws before malicious actors can exploit them.
For students caught in the middle, this entire episode has been stressful. Board exams are tough enough without worrying about whether your answer sheet will reach the right evaluator or if your data is secure.
The story isn't over yet. CBSE is working on fixes, students are waiting for their correct answer sheets, and the conversation about digital security in education continues. What's clear is that transparency and security can't be afterthoughts. They need to be built into the system from day one.
