PT-2026-25875 · Drangsoft · Drangsoft Gcb/Fcb Audit

Cyku Hong · Publicado 2026-03-17 · Atualizado 2026-03-17 · CVE-2026-4312

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DrangSoft GCB/FCB Audit Software (affected versions not specified)

Description The software contains a missing authentication issue, allowing unauthenticated remote attackers to access certain APIs. This access enables the creation of new administrative accounts. The issue concerns the ability to bypass access controls and create administrative accounts without proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2026-4312

Produtos afetados

Drangsoft Gcb/Fcb Audit

Referências · 11

• https://twitter.com/VulmonFeeds/status/2033827825539567814 · Publicação no Twitter
• https://twcert.org.tw/tw/cp-132-10784-4f67d-1.html · Nota
• https://twitter.com/CVEnew/status/2033994292310773958 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2033832536959234418 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4312 · Nota de Segurança
• https://twitter.com/CVEarity/status/2033956159837900901 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2033829967427944813 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2033810328409010182 · Publicação no Twitter
• https://twcert.org.tw/en/cp-139-10785-2cafe-2.html · Nota
• https://twitter.com/TheHackerWire/status/2034030820835660114 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2033826484419231808 · Publicação no Twitter