PoC Index85,092 CVEs with PoCs

CVE-2026-13510

SimStudioAI sim Password Protection deployment.ts weak hash

LOW 2.9EPSS 0.3%

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.

Affected
SimStudioAI · sim
CVSS v4.0 VULDB
2.9 LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB
3.7 LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 VULDB
2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
0.31% chance of exploitation in the next 30 days, 22nd percentile
Published
2026-06-28
Updated
2026-06-29

Proof-of-concept exploits (1)

References

Related