CVE-2026-46749
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
20/100
Published: 2026-06-09
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
High
UI:
None
S:
X
AT:
Present
VC:
Low
VI:
None
VA:
None
Description
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.
Weakness Classification (1)
Affected Software (8)
References & Advisories (1)
Vendor Advisory