CVE-2026-65309 in 250 SCALA

الملخص

بحسب MITRE • 31/07/2026

ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: CyberDanube
• حجز: 21/07/2026
• إفشاء: 31/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-385054
• CPE: جاهز
• CWE: CWE-916 (مؤكد)
• CVSS: 3.7 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-65309
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-65309
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-65309/