Vulnerabilities in Wibu-Systems’ CodeMeter Runtime

Wibu-Systems has addressed several vulnerabilities in CodeMeter Runtime. These vulnerabilities are located in various components of CodeMeter Runtime, particularly in versions 8.41a and 9.10. A local attacker can exploit incorrect verification of NTFS reparse points when creating temporary files...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

PT-2026-82479

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...