CVE-2026-15933

Vulnerability Description

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP (for scan delivery), Active Directory (for user list import), and SharePoint credentials, in cleartext via the web administration panel page source, allowing exposure of sensitive third-party authentication data. This issue was fixed in version 26.08

Related Weaknesses (CWE)

References

• https://cert.pl/en/posts/2026/09/CVE-2026-15933
• https://optimidoc.com/category/optimidoc-server/

FAQ

What is CVE-2026-15933?

CVE-2026-15933 is a documented vulnerability. OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP (for scan deli...

How severe is CVE-2026-15933?

CVSS scoring is not yet available for CVE-2026-15933. Check NVD for updates.

Is there a patch for CVE-2026-15933?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.