The Gotac Police Statistics Database System contains a missing authentication flaw that permits an attacker to read, modify, and delete database records without providing any credentials. The vulnerability is exercised via a specific application functionality and, once accessed, allows full compromise of confidentiality, integrity, and availability of the system’s data. Consequently, sensitive law‑enforcement records could be exposed or corrupted, undermining public trust and operational efficiency.

The affected vendor is Gotac, product Police Statistics Database System. The advisory indicates that versions prior to 1.0.3 are vulnerable, and an upgrade to version 1.0.3 or later resolves the issue. No additional version details are provided beyond this update path.

With a CVSS score of 9.3 the flaw is considered very high severity, while the EPSS score of less than 1 % suggests current exploitation activity is low. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote: any entity with network access to the system could exploit the missing authentication without credentials, making mitigation critical even if exploitation has not yet been observed.