CVE-2026-37454

Published: Jun 25, 2026Modified: Jul 14, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption

Affected (1)

Products: Msi: Center

Msi

1 product

Center

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Msi Center	Before 2.0.70.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://csr.msi.com/global/product-security-advisories

Source: cve@mitre.org

Vendor Advisory

https://github.com/LittleSuRii/CVE-2026-MSIAPService

Source: cve@mitre.org

MitigationThird Party Advisory

Timeline

No history available yet.