NewsFortinet PSIRT
Hardcoded symmetric encryption key for Postgresql
CVSSv3 Score: 5.2 A use of hard-coded cryptographic key vulnerability [CWE 321] in FortiClientEMS may allow an attacker in possession of an encrypted dump of the database to decrypt it. Revised on 2026-04-14 00:00:00
Teaser aus der Quelle
CVSSv3 Score: 5.2 A use of hard-coded cryptographic key vulnerability [CWE 321] in FortiClientEMS may allow an attacker in possession of an encrypted dump of the database to decrypt it. Revised on 2026-04-14 00:00:00
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Fortinet PSIRT lesenMehr zu encryption
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2026-QP21875Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-JY19705Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-TB63011Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- NiedrigCVE-2026-127928In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inplace() and boot_image_validate_encrypt…
- MittelCVE-2026-126838A MongoDB Rust Driver component that holds client-side field level encryption settings includes key management service credential material in its diagnostic …
- Ohne Bewertungosv:CLEANSTART-2026-IM23671Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne Bewertungosv:CLEANSTART-2026-NA22425Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
- Ohne BewertungCVE-2026-119236An mvfst QUIC server retained CRYPTO frame data received at an encryption level (Initial or Handshake) that the TLS handshake had already moved past. Because…
Weitere News-Einträge
- Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysNewsThe Hacker News
- Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionNewsThe Hacker News
- IonQ’s $1.2 billion acquisition of Elisity is trying to position it for quantum cybersecurityNewsCSO Online
- FBI's CJIS v6.1: What Security Teams Need to Know.NewsBleepingComputer
- South Korean startup platform breach exposes key management failuresNewsBleepingComputer
- Hardware Makers Implement Post-Quantum Cryptography as Security Threats NearNewsDark Reading
- Grok chat duped into swallowing injected instructionsNewsThe Register — Security
- 5 key priorities for your Black Hat agenda — and what to avoidNewsCSO Online
Quelle: https://fortiguard.fortinet.com/psirt/FG-IR-26-107
ID