1. Home
  2. CVE Database
  3. CVE-2026-2103
HIGH · 7.1

CVE-2026-2103

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical acros...

Vulnerability Description

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.

CVSS Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
InforSyteline Erp10.0.8803.16889

Related Weaknesses (CWE)

CWE-321CWE-798

References

FAQ

What is CVE-2026-2103?

CVE-2026-2103 is a vulnerability with a CVSS score of 7.1 (HIGH). Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical acros...

How severe is CVE-2026-2103?

CVE-2026-2103 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-2103?

Check the references section above for vendor advisories and patch information. Affected products include: Infor Syteline Erp.