CVE-2020-8995: Bilanc

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools.

Affected products

• Bilanc Bilanc: up to and including 014_31.01.2020

Published 2020-12-21. Last modified 2026-06-17.