This vulnerability (CVE-2026-27073) affects Addi – Cuotas que se adaptan a ti versions up to 2.0.4 and involves hard-coded credentials that allow an attacker to exploit the password recovery functionality. The CVSS score of 7.5 indicates a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or vendor advisory is currently provided, and no known exploits have been observed.

Exploitation of this vulnerability can allow an attacker to bypass password recovery protections by leveraging hard-coded credentials, potentially leading to unauthorized modification or manipulation of user accounts or data. Confidentiality and availability are not impacted according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to password recovery features or implementing compensating controls to mitigate risk.