CVE-2026-41879

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file. This issue was fixed in version v3.17-2000.

CVSS

No CVSS.

References

Link	Resource
https://cert.pl/posts/2026/07/CVE-2026-41876

Configurations

No configuration.

History

24 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) R-SOFT DMS almacena las credenciales de superadministrador utilizando un hash MD5 anidado sin sal. Esto permite a un atacante que obtiene el hash de la contraseña decodificar las credenciales de superadministrador. Críticamente, esta contraseña no se puede cambiar excepto modificando el archivo de configuración. Este problema fue solucionado en la versión v3.17-2000.

Information

Published : 2026-07-10 10:16

Updated : 2026-10-24 23:10

NVD link : CVE-2026-41879

Mitre link : CVE-2026-41879

CVE.ORG link : CVE-2026-41879

JSON object : View

Products Affected

No product.

CWE

CWE-328

Use of Weak Hash

{"id": "CVE-2026-41879", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41879", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-10T10:19:06.995124Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "R-SOFT SERWIS", "product": "DMS", "versions": [{"status": "affected", "version": "0", "lessThan": "v3.17-2000", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-10T10:16:24.077", "references": [{"url": "https://cert.pl/posts/2026/07/CVE-2026-41876", "source": "cvd@cert.pl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-328"}]}], "descriptions": [{"lang": "en", "value": "R-SOFT DMS\u00a0stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed\u00a0except by modifying the configuration file.\n\nThis issue was fixed in version\u00a0v3.17-2000."}, {"lang": "es", "value": "R-SOFT DMS almacena las credenciales de superadministrador utilizando un hash MD5 anidado sin sal. Esto permite a un atacante que obtiene el hash de la contrase\u00f1a decodificar las credenciales de superadministrador. Cr\u00edticamente, esta contrase\u00f1a no se puede cambiar excepto modificando el archivo de configuraci\u00f3n.\n\nEste problema fue solucionado en la versi\u00f3n v3.17-2000."}], "lastModified": "2026-10-24T23:10:00.160", "sourceIdentifier": "cvd@cert.pl"}