Skip to content

Vendor

drEryk vulnerabilities

2 published CVES affecting drEryk, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of drEryk alerts

Products

Latest drEryk CVEs

Newest publication first

  1. CVE-2026-17038 Use of Hard-coded Credentials in drEryk Gabinet

    Published
    MediumCVSS 6.9 EPSS 0.42%

    DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, inc...

  2. CVE-2024-3699 Hardcoded password in drEryk Gabinet

    Published
    CriticalCVSS 9.3 EPSS 0.41%

    Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.