CVE-2026-103548
Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain
CVSS
—
Sem CVSS
EPSS
0.1%
p1
KEV
—
Exploit Today
0
0-100
Publicado: 30 de set. de 2026 · Última mod.: 1 de out. de 2026 · CWE-257 · CWE-260 · CWE-261
0.1%EPSS · 30 dias0.1%
2026-10-082026-11-05
Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any user.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-110971—6.4%
——2Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.
This issue was fixed in metric 334 in version 10.02.002.3dCVE-2026-287457.5 ALT12.2%
——4Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.26dCVE-2026-735896.3 MÉD1.4%
——0Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.42dCVE-2026-692976.5 MÉD58.0%
——17Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.42dCVE-2026-801764.7 MÉD1.2%
——0Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.51dCVE-2026-634247.3 ALT2.8%
——1During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.13d