cveboard RSS feed

CVE-2025-13776

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Hard-coded database credentials in Finka software

Multiple Finka programs use hard-coded Firebird database credentials (shared across all instances of this software). A malicious attacker in local network who knows default credentials is able to read and edit database content. This vulnerability has been fixed in version: Finka-FK 18.5, Finka-KPR 16.6, Finka-Płace 13.4, Finka-Faktura 18.3, Finka-Magazyn 8.3, Finka-STW 12.3

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Finka-FK

Vendor
TIK-SOFT
Product
Finka-FK
Platforms
Unknown
Default status
unaffected
Finka-FK · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver18.5UnavailableNone listed

Finka-KPR

Vendor
TIK-SOFT
Product
Finka-KPR
Platforms
Unknown
Default status
unaffected
Finka-KPR · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver16.6UnavailableNone listed

Finka-Płace

Vendor
TIK-SOFT
Product
Finka-Płace
Platforms
Unknown
Default status
unaffected
Finka-Płace · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver13.4UnavailableNone listed

Finka-Faktura

Vendor
TIK-SOFT
Product
Finka-Faktura
Platforms
Unknown
Default status
unaffected
Finka-Faktura · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver18.3UnavailableNone listed

Finka-Magazyn

Vendor
TIK-SOFT
Product
Finka-Magazyn
Platforms
Unknown
Default status
unaffected
Finka-Magazyn · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver8.3UnavailableNone listed

Finka-STW

Vendor
TIK-SOFT
Product
Finka-STW
Platforms
Unknown
Default status
unaffected
Finka-STW · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver12.3UnavailableNone listed