EUVD-2026-75403
GHSA-4qc3-v5c2-6x2v
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible API requires no attacker privileges; static credentials enable read/write on tickets only, no scope change or availability impact.
Primary rating from Vendor (CERT-PL).
CVSS VectorVendor: CERT-PL
Lifecycle Timeline
2DescriptionCVE.org
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.
AnalysisAI
Hard-coded API credentials embedded in DrEryk Gabinet's ticket reporting component allow any network-accessible attacker to authenticate directly to the ticket system API in versions before 11.5.0. Once the static credentials are known - through reverse engineering or public disclosure by CERT-PL - an attacker can perform privileged ticket operations including reading and modifying records beyond what the application's own permission model permits. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Network access to the ticket system API endpoint is required. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 6.9 with network attack vector and no privileges required reflects a meaningful but bounded risk: confidentiality and integrity impacts are rated low (VC:L/VI:L) because the exposed functionality is scoped to the ticket API rather than core patient records or system infrastructure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade DrEryk Gabinet to version 11.5.0 or later, which removes the hard-coded credentials from the ticket reporting component; the vendor page at https://dreryk.pl/produkty/gabinet/ and the CERT-PL advisory at https://cert.pl/posts/2026/09/CVE-2026-17038 should be consulted for release details. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-798 – Use of Hard-coded Credentials
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today