CVE-2026-4312CWE-306

DrangSoft｜GCB/FCB Audit Software - Missing Authentication

Critical · published March 17, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00831 · 57.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-17T07:29Z
EPSS history
Timeline
  • 17 MAR 07:29Z
    DrangSoft｜GCB/FCB Audit Software - Missing Authentication
    cvelistv5