GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain A…

GCB/FCB Audit Software developed by DrangSoft contains a critical Missing Authentication vulnerability (CVE-2026-4312). The vulnerability allows unauthenticated remote attackers to directly access certain APIs without proper authentication controls. Attackers can exploit this flaw to create new administrative accounts, potentially leading to complete system compromise. This represents a severe security flaw that could enable unauthorized administrative access to audit systems. The vulnerability affects the authentication mechanism of the software's API endpoints.