What is GHSA-4r5q-f55r-9frx?

GHSA-4r5q-f55r-9frx is a security advisory published by GitHub Security Advisories with High severity. mpGabinet performs client-side authentication. An attacker with access to any application...

Which CVE IDs does GHSA-4r5q-f55r-9frx cover?

GHSA-4r5q-f55r-9frx covers the following CVE IDs: CVE-2026-40551. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4r5q-f55r-9frxHigh

mpGabinet performs client-side authentication. An attacker with access to any application...

Vendor

GitHub Security Advisories

Published

April 28, 2026

Last Modified

September 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-40551 →

📋 Description

mpGabinet performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process by manipulating the application binary and authenticate as an arbitrary user.

This issue affects mpGabinet version 23.12.19 and below.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-40551
https://cert.pl/posts/2026/04/CVE-2026-40550
https://www.mpgabinet.pl
https://www.binsoft.pl/produkty
https://github.com/advisories/GHSA-4r5q-f55r-9frx