CVE-2026-41879

Vulnerability Description

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file.

This issue was fixed in version v3.17-2000.

Vulnerability Details

Published Date

July 10, 2026

Last Modified

July 10, 2026

CWE ID

CWE-328

Source

NVD

Vendor

R-SOFT SERWIS

Product

DMS

External References

https://cert.pl/posts/2026/07/CVE-2026-41876

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment