CVE-2026-3873

HIGH EPSS 10.9%
Published Mar 13, 20263mo ago · Modified May 19, 20261mo ago
7.2 CVSS 3.1
High
Find Similar
Published Mar 13, 2026 3mo ago
Last Modified May 19, 2026 1mo ago

Description

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.

CVSS Details

Base Score
7.2
Exploitability
3.9
Impact
2.7
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Changed
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
10.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-798 Use of Hard-coded Credentials Authentication

References 1

  • support.avantra.com https://support.avantra.com/hc/en-us/articles/5352465121695-Security-Notice-Legacy-Built-In-User-Account-rtm

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.