NewsFortinet PSIRT
Hardcoded symmetric encryption key for Postgresql
Teaser from the source
CVSSv3 Score: 5.2 A use of hard-coded cryptographic key vulnerability [CWE 321] in FortiClientEMS may allow an attacker in possession of an encrypted dump of the database to decrypt it. Revised on 2026-04-14 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on encryption
Other advisories
- HighCVE-2026-126818A Ruby object-document mapper does not apply its automatic field-level encryption configuration to certain fields when the data model uses class inheritance.…
- MediumCVE-2026-126817A flaw in the automatic client-side encryption schema generation of the Mongoid ODM may cause values that an application declared for encryption to be writte…
- HighCVE-2026-115538Docker Engine overlay-network encryption rules are not restored after a firewalld reload
- Not ratedosv:CLEANSTART-2026-QP21875Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Not ratedosv:CLEANSTART-2026-JY19705Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Not ratedosv:CLEANSTART-2026-TB63011Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- LowCVE-2026-127928In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inplace() and boot_image_validate_encrypt…
- MediumCVE-2026-126838A MongoDB Rust Driver component that holds client-side field level encryption settings includes key management service credential material in its diagnostic …
Other news entries
- Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysNewsThe Hacker News
- Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionNewsThe Hacker News
- IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurityNewsCSO Online
- FBI's CJIS v6.1: What Security Teams Need to Know.NewsBleepingComputer
- South Korean startup platform breach exposes key management failuresNewsBleepingComputer
- Hardware Makers Implement Post-Quantum Cryptography as Security Threats NearNewsDark Reading
- Grok chat duped into swallowing injected instructionsNewsThe Register — Security
- 5 key priorities for your Black Hat agenda — and what to avoidNewsCSO Online
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-107
ID