CVE-2026-114119

{
  "etk_id": "ETK-2026-2281",
  "cve_id": "CVE-2026-114119",
  "display_id": "CVE-2026-114119",
  "ghsa_id": "GHSA-hmqc-m6cv-3c9r",
  "euvd_id": "EUVD-2026-106922",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Hardcoded database administrator credential in Bp Premier",
  "summary": "Bp Premier versions before 1.14.1.1128 include a shared embedded credential for the associated Microsoft SQL Server instance. An attacker who can connect to that database service may bypass the application's access controls, gain database administrator access, and execute commands on the host as SYSTEM.",
  "mitigation": "Upgrade Bp Premier to version 1.14.1.1128 or later. Until upgrades are complete, restrict network access to the SQL Server instance to only required trusted systems.",
  "vendor": "Best Practice Software",
  "product": "Bp Premier",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.14.1.1128"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.14.1.1128"
      ],
      "package_name": "Bp Premier",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.597128483333334,
  "t0_at": "2026-10-21T00:37:16.230000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-21T00:37:16.230000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T00:37:16.230000+00:00",
      "url": "https://github.com/advisories/GHSA-hmqc-m6cv-3c9r"
    }
  }
}