CVE-2026-3873
HighSummary
The Use of Hard-coded Credentials vulnerability in Avantra allows accessing functionality not properly constrained by ACLs. This issue affects Avantra versions before 25.3.0.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive functions, potentially leading to data breaches or unauthorized actions.
Recommendation
It is recommended to update Avantra to version 25.3.0 or later and to review and secure all hard-coded credentials.
Other vulnerabilities in Avantra
See all- CVE-2026-8670Critical
Insufficient session expiration in syslink software AG Avantra on Linux and Windows allows reusing session IDs (Session Replay). This issue affects Avantra before version 25.3.1.
- CVE-2026-8673Medium
Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.
- CVE-2026-8672Medium
syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.
- CVE-2026-8671High
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.
Original NVD description (English source)
Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.