Wojciech Giełda

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.

**Name of the Vulnerable Software and Affected Versions** KS-SOMED module KSPLUPDFTP.exe versions prior to 30.00.00.056 KS-SOMED module ANEKSKLIENT.EXE versions prior to 29.00.02.026 **Description** The use of hard-coded credentials allows an unauthorized attacker to gain access to the FTP server hosting the application's update packages. An attacker utilizing these credentials could upload a malicious update file, which may then be distributed and installed on client machines as a legitimate update. **Recommendations** Update KSPLUPDFTP.exe to version 30.00.00.056 or later. Update ANEKSKLIENT.EXE to version 29.00.02.026 or later. Remove hard-coded credentials from the code and modify the update process.

**Name of the Vulnerable Software and Affected Versions** Comarch ERP Optima versions prior to 2026.4 **Description** The client connects to a database using a high privileged account regardless of the application account used for login. A local attacker controlling the client process can dump its memory to extract credentials, enabling privileged access to the database. This requires the client application to be previously configured, although a user does not need to be logged in. **Recommendations** Update to version 2026.4.

**Name of the Vulnerable Software and Affected Versions** Comarch ERP Optima versions prior to 2026.4 **Description** The client uses a hard-coded password for a database user that cannot be changed. This allows a remote attacker to gain access to the database with elevated privileges, which may include the ability to execute system commands on the server. **Recommendations** Update to version 2026.4.

**Name of the Vulnerable Software and Affected Versions** KlinikaXP versions prior to 5.39.01.01 KlinikaXP Insertino versions prior to 3.1.0.1 **Description** The use of hard-coded credentials in KlinikaXP and KlinikaXP Insertino allowed an unauthorized attacker access to internal services, including the FTP server hosting application updates. An attacker could upload a malicious update file, potentially distributing and installing it on client machines as a legitimate update. **Recommendations** Update KlinikaXP to version 5.39.01.01 or later. Update KlinikaXP Insertino to version 3.1.0.1 or later. Rotate previously exposed credentials.