Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00428·Published 2026-10-21·Fixed in 1.14.1.1128CWE-798