PT-2026-25875 · Drangsoft · Drangsoft Gcb/Fcb Audit

Cyku Hong · Published 2026-03-17 · Updated 2026-03-17 · CVE-2026-4312

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DrangSoft GCB/FCB Audit Software (affected versions not specified)

Description The software contains a missing authentication issue, allowing unauthenticated remote attackers to access certain APIs. This access enables the creation of new administrative accounts. The issue concerns the ability to bypass access controls and create administrative accounts without proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-4312

Affected Products

Drangsoft Gcb/Fcb Audit

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-4312 · Security Note
• https://twitter.com/VulmonFeeds/status/2033827825539567814 · Twitter Post
• https://twcert.org.tw/tw/cp-132-10784-4f67d-1.html · Note
• https://twitter.com/CVEnew/status/2033994292310773958 · Twitter Post
• https://twitter.com/cyberbivash/status/2033832536959234418 · Twitter Post
• https://twitter.com/CVEarity/status/2033956159837900901 · Twitter Post
• https://twitter.com/cyberbivash/status/2033829967427944813 · Twitter Post
• https://twitter.com/0dayPublishing/status/2033810328409010182 · Twitter Post
• https://twcert.org.tw/en/cp-139-10785-2cafe-2.html · Note
• https://twitter.com/TheHackerWire/status/2034030820835660114 · Twitter Post
• https://twitter.com/CveFindCom/status/2033826484419231808 · Twitter Post