CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

CVE-2026-4312 DrangSoft｜GCB/FCB Audit Software - Missing Authentication

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

CVE-2026-4312

Affected product: DrangSoft GCB/FCB Audit Software. Vulnerability: Missing Authentication, enabling unauthenticated remote attackers to directly access APIs and create a new administrative account. Impact/risks: High impact on confidentiality, integrity, and availability as per CVSS metrics (CRIT...

CVE-2026-4258

creationtimestamp| type| source ---|---|--- 2026-03-17 06:58:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhafiegv5q2n 2026-03-17 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116243341600749603 2026-03-17 07:30:32+00:00| seen|...

CVE-2026-4276

creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:09+00:00| seen| https://kb.cert.org/vuls/id/624941 2026-03-18 23:07:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhem37zmxp25...

CVE-2026-2713

creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:00+00:00| seen| https://jvn.jp/en/jp/JVN96706146/ 2026-04-05 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mipxqj3g4f2q...

CVE-2026-33067

creationtimestamp| type| source ---|---|--- 2026-03-17 00:49:57+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mvpm-v6q4-m2pf 2026-03-20 10:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhibldx3oz27...

EUVD-2026-12522

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

DrangSoft GCB/FCB Audit Software 访问控制错误漏洞

DrangSoft GCB/FCB Audit Software is a financial statement auditing software developed by DrangSoft Corporation in China. DrangSoft GCB/FCB Audit Software has a vulnerability related to access control. This vulnerability stems from the lack of authentication, which may allow unverified remote...

DEBIAN-CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

The CVE-2026-21991 issue affects the DTrace component dtprobed, specifically its handling of USDT probes, enabling arbitrary file creation through crafted provider names. Multiple connected advisories confirm dtprobed as the vulnerable element and describe the risk of code execution as a worst-ca...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

CVE-2026-21991

A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...

EUVD-2026-12512

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2 fail to verify runcreate permission for empty playbookId, which allows team members to create unauthorized runs via the playbook run API. Mattermost Advisory ID: MMSA-2025-00542...

CVE-2026-32873

creationtimestamp| type| source ---|---|--- 2026-03-16 20:49:50+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-4w98-xf39-23gp 2026-03-20 01:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhfrsmfpq2k...

CVE-2026-26304

Mattermost vulnerability CVE-2026-26304 affects Mattermost server versions 11.3.x (up to 11.3.0) and 11.2.x (up to 11.2.2). The issue is a permission check bypass in the playbook run creation path: run_create permission for an empty playbookId is not verified, enabling team members to create unau...

CVE-2026-30875

creationtimestamp| type| source ---|---|--- 2026-03-16 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30875 2026-03-18 22:14:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhej5imvn22t 2026-03-22 11:40:09+00:00| seen|...