Vulnerability Description
R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file. This issue was fixed in version v3.17-2000.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-41879?
CVE-2026-41879 is a documented vulnerability. R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be chan...
How severe is CVE-2026-41879?
CVSS scoring is not yet available for CVE-2026-41879. Check NVD for updates.
Is there a patch for CVE-2026-41879?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.