DrangSoft GCB/FCB Audit Software Missing Authentication Vulnerability Allowing Unauthenticated Account Creation
Vulnerability
A missing authentication vulnerability has been identified in GCB/FCB Audit Software developed by DrangSoft, affecting versions prior to 20260108. This vulnerability allows unauthenticated remote attackers to access certain APIs and create new administrative accounts.
Impact
Exploitation of this vulnerability allows for the creation of administrative accounts, potentially leading to unauthorized access and control within the application.
Remediation
Users are advised to update the software to version 20260108 or later.
Added: Mar 17, 2026, 8:19 AM
Updated: Mar 17, 2026, 8:19 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
4.0threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.