CVE-2026-107171
MEDIUMCVSS 6.9/10EPSS 0.12%
Last modified
CVE-2026-107171 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Trellix | Trellix Agent | 5.8.4 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-107171?
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
How severe is CVE-2026-107171?
CVE-2026-107171 has a CVSS score of 6.9/10 (MEDIUM severity). The EPSS model estimates a 0.12% probability of exploitation in the next 30 days.
How do I fix CVE-2026-107171?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-107166A weakness has been identified in Open5GS up to 2.7.7. This …5.3
- CVE-2026-107167A flaw was found in m17n-lib. A user providing specially cra…6.2
- CVE-2026-107168A flaw was found in m17n-lib. By providing crafted input con…6.2
- CVE-2026-107169A flaw was found in m17n-lib. An attacker could provide spec…6.2
- CVE-2026-10717Out of bounds write and reads in openSeaChest’s --showSCSIDe…1.8
- CVE-2026-107170A flaw was found in m17n-lib. A partial failure during libra…2.9
- CVE-2026-107172Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-107174A flaw was found in source-to-image. When unpacking archive …6.4
- CVE-2026-107175MISP contains a defect in its event save workflow that preve…5.3
- CVE-2026-107176A flaw was found in the cluster-samples-operator. The RBAC R…6.8
- CVE-2026-107177Express Gateway through 1.16.11 contains a hardcoded cryptog…5.9
- CVE-2026-107178The Image Photo Gallery Final Tiles Grid WordPress plugin be…6.8
Are you affected by CVE-2026-107171?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST