CVE-2025-68420
High
Description
Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use them to gain a privileged access to the database. In order to exploit this vulnerability, the client application has to be already configured, but a user does not have to be logged in. This issue has been fixed in version 2026.4
SeverityHigh
CVSS7.5
Exploit probability—
ProductERP Optima
PublishedMay 14, 2026
First seenMay 14, 2026
Weakness typeCWE-266CWE-266
How to fix
Update
- Comarch ERP Optima2026.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Comarch ERP Optima | v < 2026.4 | 2026.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.