Gcb Fcb Audit Software
Monthly
Unauthenticated administrative account creation in DrangSoft GCB/FCB Audit Software (versions prior to 20260108) allows remote attackers to invoke exposed APIs without authentication and provision new admin users, granting full control of the audit platform. The CVSS 4.0 base score of 9.3 reflects network-reachable, no-privilege, no-interaction exploitation with high confidentiality, integrity, and availability impact. Despite the trivial attack path, EPSS is currently low (0.13%, 32nd percentile) and no public exploit identified at time of analysis.
Unauthenticated administrative account creation in DrangSoft GCB/FCB Audit Software (versions prior to 20260108) allows remote attackers to invoke exposed APIs without authentication and provision new admin users, granting full control of the audit platform. The CVSS 4.0 base score of 9.3 reflects network-reachable, no-privilege, no-interaction exploitation with high confidentiality, integrity, and availability impact. Despite the trivial attack path, EPSS is currently low (0.13%, 32nd percentile) and no public exploit identified at time of analysis.