1. Home
  2. CVE Database
  3. CVE-2025-26849
MEDIUM · 4.3

CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall...

Vulnerability Description

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall rules.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DocusnapDocusnap<= 13.0.1440.24261

Related Weaknesses (CWE)

CWE-1394

References

FAQ

What is CVE-2025-26849?

CVE-2025-26849 is a vulnerability with a CVSS score of 4.3 (MEDIUM). There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be used to decrypt inventory files that contain sensitive information such as firewall...

How severe is CVE-2025-26849?

CVE-2025-26849 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-26849?

Check the references section above for vendor advisories and patch information. Affected products include: Docusnap Docusnap.