https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 17:28:38 +0000 https://vulnerability.circl.lu/vuln/gcve-123-2026-0001 <p><strong>Affected:</strong> Best Practice Software Bp Premier</p> <p>Best Practice Software Bp Premier uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations; in affected versions, the credential could not be changed without breaking the application. An attacker with network access to the database instance can use this credential to bypass application authentication and gain sysadmin privileges, allowing for arbitrary operating-system command execution (typically as SYSTEM). Exploitability depends entirely on the database&#39;s network exposure.</p> <p><strong>Affected:</strong> Best Practice Software Bp Premier</p> <p>Best Practice Software Bp Premier uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations; in affected versions, the credential could not be changed without breaking the application. An attacker with network access to the database instance can use this credential to bypass application authentication and gain sysadmin privileges, allowing for arbitrary operating-system command execution (typically as SYSTEM). Exploitability depends entirely on the database&#39;s network exposure.</p> https://vulnerability.circl.lu/vuln/gcve-123-2026-0001 Fri, 25 Sep 2026 00:00:00 +0000