CVE-2026-40551 · CVEKit

cve.orgen

310 chars

mpGabinet performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process by manipulating the application binary and authenticate as an arbitrary user. This issue affects mpGabinet version 23.12.19 and below.

NVDen

310 chars

mpGabinet performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process by manipulating the application binary and authenticate as an arbitrary user. This issue affects mpGabinet version 23.12.19 and below.

CVSS metrics across sources

2

Version	Type	Source	Base	Exp	Impact	Vector
4.0	Primary	cve.org	8.4	—	—	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
4.0	Secondary	NVD	8.4	—	—