CVE-2026-40550 Details

A privilege escalation vulnerability exists in BinSoft mpGabinet versions through 23.12.19. The issue arises from excessive database privileges granted to the application's database user. This allows an attacker with access to a running instance of the application connected to the backend server to extract database credentials from the application's memory by inspecting the active process. While retrieving credentials from memory is expected behavior, the exposed credentials provide administrative access to the database, surpassing the privileges necessary for normal application operations. Consequently, this enables an attacker to execute actions beyond those allowed through the application interface.