| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
| CVE-2026-80211 FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage | 27 Aug 202614:50 | – | cvelist | |
| EUVD-2026-67145 | 27 Aug 202614:50 | – | euvd | |
| CVE-2026-80211 | 27 Aug 202617:20 | – | nvd | |
| PT-2026-82563 | 27 Aug 202600:00 | – | ptsecurity | |
| CVE-2026-80211: Use of Password Hash With Insufficient Computational Effort | 27 Aug 202600:00 | – | rapid7 | |
| CVE-2026-80211 | 27 Aug 202617:20 | – | ubuntucve | |
| CVE-2026-80211 FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage | 27 Aug 202614:50 | – | vulnrichment |
Node
[
{
"vendor": "FrontAccounting",
"product": "FrontAccounting",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "2.4.20",
"status": "affected",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| password | request body | admin/users.php | Admin user creation stores the supplied password as an unsalted MD5 digest instead of using a salted or adaptive hash. | CWE-916 |
| password | request body | admin/change_current_user_password.php | Password change uses md5(password) without salt before updating the user, enabling easy offline cracking of obtained hashes. | CWE-916 |
| password | path | includes/current_user.inc/forgotten-password | Forgotten-password flow hashes the newly generated password with unsalted MD5, leading to insecure password storage. | CWE-916 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Sep 2026 14:19Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.15.9
CVSS 48.2
EPSS0.00307
SSVC