CVE-2026-25815

Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild from 2025-12-16 through 2026 by default, the encryption key is the same across all customers' installations. NOTE: the Supplier's position is that the instanc...

PT-2022-17992

Name of the Vulnerable Software and Affected Versions RunAsSpc version 4.0 Description The issue concerns the use of a universal and recoverable encryption key in RunAsSpc. If an attacker gains possession of a file encrypted by RunAsSpc, they can recover the credentials that were used...