Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-17038

Use of Hard-coded Credentials in drEryk Gabinet

CVSS 4.0 6.9 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-17038

Published

DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading and modifying tickets.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-17038

Published

drEryk Gabinet

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "drEryk",
                    "product": "drEryk Gabinet",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "11.5.0",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON