← Back

CVE-2025-26849

nvd nist
Published: Mar 4, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Exploitability: 2.5 / Impact: 1.4
Source: MITRE (Secondary)

Description

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

Affected (1)

Products: Docusnap: Docusnap
Docusnap
1 product
Docusnap
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Docusnap
Up to 13.0.1440.24261

Related CWEs

CWE-1394
Use of Default Cryptographic Key
The product uses a default cryptographic key for potentially critical functionality.

References (3)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
ExploitThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitThird Party Advisory

Timeline

No history available yet.