In an exclusive interview, 19-year-old ethical hacker Nisarga Adhikary revealed that he identified over 45 security vulnerabilities in the Central Board of Secondary Education's (CBSE) On-Screen Marking (OSM) system shortly after its launch on February 25, 2023. He reported these vulnerabilities to the Indian Computer Emergency Response Team (CERT-In) on February 26 or 27, claiming that while one issue was addressed, many others remained unresolved for months. Adhikary described the vulnerabilities as serious, likening them to an unlocked door with a key in plain sight. He alleged that he accessed sensitive information, including names, phone numbers, and even a database with 9.3 million records. Notably, he claimed to have accessed the cloud storage containing scanned answer sheets of numerous students. Despite CBSE's acknowledgment of the vulnerabilities and ongoing security review, Adhikary criticized the board for not contacting him directly. His claims raise significant concerns about data security and the effectiveness of the measures taken by CBSE to protect sensitive information.