PT-2026-25541 · Tecnick · Tcexam

Ahmadmarzouk · Publicado 2026-03-15 · Atualizado 2026-03-16 · CVE-2026-4168

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tecnick TCExam version 16.5.0

Description A security issue exists in Tecnick TCExam. The problem is located in an unknown function within the file /admin/code/tce edit group.php of the Group Handler component. Manipulating the Name argument can lead to cross site scripting. The attack can be initiated remotely. The exploit is publicly available.

Recommendations Upgrade the affected component to a later release where this issue is addressed.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4168

Produtos afetados

Tcexam

Referências · 9

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/CVE%20Stored%20XSS.md · Exploit
• https://github.com/tecnickcom/tcexam/tags · Correção
• https://vuldb.com/?submit.769826 · Nota
• https://t.me/CVEtracker/47415 · Publicação no Telegram
• https://twitter.com/cyberbivash/status/2033101903735714082 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4168 · Nota de Segurança
• https://twitter.com/CVEnew/status/2033194285387169885 · Publicação no Twitter
• https://vuldb.com/?ctiid.351075 · Nota
• https://vuldb.com/?id.351075 · Nota