CVE-2026-82453 in rust-iot-platform

Sumário

de MITRE • 29/08/2026

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: VulnCheck
• Reservar: 29/08/2026
• Divulgação: 29/08/2026
• Moderação: aceite
• Entrada: VDB-397024
• CPE: pronto
• CWE: CWE-311 (confirmado)
• CVSS: 7.5 (CNA)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-82453
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82453
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-82453/