CVE-2025-26849 MEDIUM

CVE-2025-26849

Vendor Docusnap

Product Docusnap

Weakness CWE-1394

Published March 4, 2025

Last update March 5, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

Key dates

02Disclosure timeline

March 4, 2025 CVE published

March 5, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-26849 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1394.html

Related vulnerabilities

04Related CVE

CVE-2025-55049 CVE-2023-6451 Publicly Known Cryptographic Machine Key In Procura Portal Application CVE-2026-5039 Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N CVE-2025-41744 Sprecher Automation: SPRECON-E series has static default key material for TLS connections CVE-2024-10748 Cosmote Greece What's Up App Realm Database RealmDB.java default key