PT-2026-25160 · Syslink Software Ag · Avantra

Vicxer Inc · Published 2026-03-13 · Updated 2026-05-19 · CVE-2026-3873

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Avantra versions prior to 25.3.0

Description A hard-coded credentials issue exists in Avantra, allowing access to functionality not properly constrained by Access Control Lists (ACLs). This could potentially allow unauthorized access to sensitive features within the system.

Recommendations Versions prior to 25.3.0 should be updated to version 25.3.0 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-3873

Affected Products

Avantra

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-3873 · Security Note
• https://support.avantra.com/hc/en-us/articles/5352465121695-Security-Notice-Legacy-Built-In-User-Account-rtm · Vendor Advisory
• https://t.me/cveNotify/164025 · Telegram Post
• https://t.me/CVEtracker/47345 · Telegram Post
• https://twitter.com/CVEnew/status/2032387547201253472 · Twitter Post
• https://twitter.com/infoflowcloud/status/2032389072367276189 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2032572667082027197 · Twitter Post
• https://twitter.com/cyberbivash/status/2032441753110716918 · Twitter Post