A CBSE official who asked not to be named acknowledged the vulnerabilities and confirmed that the contractor would be penalised.