GBG PLC's vulnerability profile centers on identity verification and document-processing software components, including its Acuant AcuFill SDK and AsureID Sentinel products, which are embedded in authentication and onboarding workflows. The durable signal reflects the sensitive nature of identity data handling, with recurring weaknesses in search-path control, privilege management, race conditions, and improper logging practices that expose credentials or personal information. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Gbgplc over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-48227HIGH An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and | Apr 4, 2023 | 7.8 | 24 | NO | NO |
CVE-2022-48222HIGH An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is no | Apr 4, 2023 | 7.8 | 24 | NO | NO |
CVE-2022-48226HIGH An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead o | Apr 4, 2023 | 7.8 | 24 | NO | NO |
CVE-2022-48224HIGH An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace fil | Apr 4, 2023 | 7.3 | 23 | NO | NO |
CVE-2022-48221HIGH An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipul | Apr 4, 2023 | 7.5 | 23 | NO | NO |
CVE-2022-48225HIGH An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation proce | Apr 4, 2023 | 7.3 | 22 | NO | NO |
CVE-2022-48223MEDIUM An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuant installer to repair certificates. This call is vulnerable | Apr 4, 2023 | 6.7 | 21 | NO | NO |
CVE-2022-48228MEDIUM An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362. | Apr 4, 2023 | 5.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Gbgplc.
Media articles that mention a CVE ID that affects a product developed by Gbgplc — matched by CVE ID, not by vendor name.