PT-2026-25160 · Syslink Software Ag · Avantra

Vicxer Inc · Publicado 2026-03-13 · Atualizado 2026-05-19 · CVE-2026-3873

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Avantra versions prior to 25.3.0

Description A hard-coded credentials issue exists in Avantra, allowing access to functionality not properly constrained by Access Control Lists (ACLs). This could potentially allow unauthorized access to sensitive features within the system.

Recommendations Versions prior to 25.3.0 should be updated to version 25.3.0 or later.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2026-3873

Produtos afetados

Avantra

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-3873 · Nota de Segurança
• https://t.me/cveNotify/164025 · Publicação no Telegram
• https://t.me/CVEtracker/47345 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2032387547201253472 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2032389072367276189 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2032572667082027197 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2032441753110716918 · Publicação no Twitter
• https://support.avantra.com/hc/en-us/articles/5352465121695-Security-Notice-Legacy-Built-In-User-Account-rtm · Aviso do Fabricante