CVE-2026-28745
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default crede
CVSS
7.5
Alta
EPSS
0.2%
p12
KEV
—
Exploit Today
4
0-100
Publicado: 9 de out. de 2026 · Última mod.: 11 de out. de 2026 · CWE-257
0.2%EPSS · 30 dias0.2%
2026-10-102026-11-05
Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-103548—0.7%
——0Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any user.36dCVE-2026-692976.5 MÉD58.0%
——17Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.43dCVE-2026-801764.7 MÉD1.2%
——0Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.51dCVE-2026-653097.5 ALT15.8%
——5ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores
and transmits user passwords using a reversible format instead of a
one-way password hash. This allows an attacker able to read the
credential store or capture network traffic to recover all stored
passwords.70dCVE-2026-225764.3 MÉD18.2%
——5A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration.11dCVE-2026-225744.1 MÉD18.9%
——6A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve Service account password via server address modification in LDAP configuration.11d