PT-2026-25541 · Tecnick · Tcexam

Ahmadmarzouk · Published 2026-03-15 · Updated 2026-03-16 · CVE-2026-4168

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tecnick TCExam version 16.5.0

Description A security issue exists in Tecnick TCExam. The problem is located in an unknown function within the file /admin/code/tce edit group.php of the Group Handler component. Manipulating the Name argument can lead to cross site scripting. The attack can be initiated remotely. The exploit is publicly available.

Recommendations Upgrade the affected component to a later release where this issue is addressed.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4168

Affected Products

Tcexam

References · 9

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/CVE%20Stored%20XSS.md · Exploit
• https://github.com/tecnickcom/tcexam/tags · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4168 · Security Note
• https://vuldb.com/?submit.769826 · Note
• https://t.me/CVEtracker/47415 · Telegram Post
• https://twitter.com/cyberbivash/status/2033101903735714082 · Twitter Post
• https://twitter.com/CVEnew/status/2033194285387169885 · Twitter Post
• https://vuldb.com/?ctiid.351075 · Note
• https://vuldb.com/?id.351075 · Note