CVE-2026-40552: Remote Code Execution in multiple BinSoft products
BinSoft · mpGabinet
Affected: BinSoft mpGabinet · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 21% of scored CVEs
DescriptionCVE.org
Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access to the application and direct access to the backend database can achieve system command execution by uploading an attachment and modifying its storage path in the database to reference an attacker-controlled remote network resource. Alternatively, it is possible to use a previously uploaded file and change its reference. When the application processes the attachment, and a user tries to open it, the referenced resource is executed by the system. Critically, this vulnerability can be exploited by any unauthenticated attacker by chaining it with CVE-2026-40550 and CVE-2026-40551, which allows obtaining database access, and logging onto any account. The described issue affects all published versions. The vendor stated that this issue is a direct result of the architecture model in which the software is distributed, and that it will be mitigated with a corrected installation manual.
Affected products8
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- BinSoft · mpGabinetup to and including 23.12.19
- BinSoft · mpFirmaup to and including 26.4.9
- BinSoft · mpFakturaup to and including 26.4.9
- BinSoft · mpFirma ERPup to and including 26.4.9
- BinSoft · mpSekretariatup to and including 25.2.4
- BinSoft · mpPOSup to and including 25.2.4
- BinSoft · mpCRMup to and including 25.2.4
- BinSoft · mpWarsztatup to and including 20.4.28
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- April 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-40552 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.