CVE-2026-3873: Syslink Software AG Avantra

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.

Affected products

• Syslink Software AG Avantra: before 25.3.0 (fixed in 25.3.0)

Published 2026-03-13. Last modified 2026-06-17.