30/05/2026
The CBSE had officially clarified on May 26, 2026 that no security breach occurred in their On-Screen Marking (OSM) portal, dismissing the hacking allegations as misleading. However, 19-year-old Class 12 student Nisarga Adhikary has continued posting on X (Twitter) showing alleged proof of portal access. He posted videos demonstrating how he allegedly gained full CRUD access (create, read, update, delete) and shell access to CBSE's production servers via SQL injection. In his latest post on May 28, he played the viral "Bad Apple" animation meme on the portal with the message "PWNED via SQLi by web hackers :3" to prove the vulnerability. Nisarga claimed hackers could potentially change marks in answer copies and access examiner-level functions, warning of serious security lapses.