CVE-2026-62140

Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions.

Published Sep 11, 2026
CVSS 5.3 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

ExpressTech Systems Quiz And Survey Master

CVE-2026-62140 at the National Vulnerability Database