CVE Feed

    Dashboard / CVE / CVE-2025-13776

    CVE-2025-13776

    Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content. This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3

    Published:Feb 24, 2026
    Last Modified:Feb 26, 2026
    EPS:Feb 24, 2026
    EPSS Score:0.00016
    CVSS Score:7.1

    Affected Products

    Vendor
    Finka
    Product
    Finka-faktura
    Vendor
    Finka
    Product
    Finka-fk
    Vendor
    Finka
    Product
    Finka-kpr
    Vendor
    Finka
    Product
    Finka-magazyn
    Vendor
    Finka
    Product
    Finka-place
    Vendor
    Finka
    Product
    Finka-stw
    Vendor
    Tik-soft
    Product
    Finka-faktura
    Vendor
    Tik-soft
    Product
    Finka-fk
    Vendor
    Tik-soft
    Product
    Finka-kpr
    Vendor
    Tik-soft
    Product
    Finka-magazyn
    Vendor
    Tik-soft
    Product
    Finka-płace
    Vendor
    Tik-soft
    Product
    Finka-stw

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High