Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content. This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-13776 Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows d… https://www.cve.org/CVERecord?id=CVE-2025-13776
Post summary
The CVE involves hard‑coded Firebird credentials in Finka software, exposing local network attackers to potential database access.
CVE-2025-13776 Unauthorized Database Access via Hard-Coded Credentials in Finka Software https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13776
Post summary
The text announces CVE-2025-13776, describing unauthorized database access due to hard‑coded credentials in Finka Software.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | finka | finka-faktura | - | - | - |
| App | finka | finka-fk | - | - | - |
| App | finka | finka-kpr | - | - | - |
| App | finka | finka-magazyn | - | - | - |
| App | finka | finka-place | - | - | - |
| App | finka | finka-stw | - | - | - |