CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

Affected

Docusnap

CVSS v3.1 MITRE

4.3 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

0.25% chance of exploitation in the next 30 days, 15th percentile

Published

2025-03-04

Updated

2025-03-05

Proof-of-concept exploits (1)

• https://www.redteam-pentesting.de/en/advisories/rt-sa-2024-012/

Security advisories

• https://www.redteam-pentesting.de/en/advisories/rt-sa-2024-012
• https://docs.docusnap.com/en/release-notes/changelog

References

• CVE Record
• NVD entry