GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00478·Published 2026-03-17·Fixed in 20260108CWE-306
