Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 5:17 p.m.7 views

CVE-2026-45787 electerm's encrypt method not safe enough

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common...

6CVSS5.9AI score0.00105EPSS
SaveExploits0References4
Rows per page
Query Builder