CVE-2026-1814

Rapid7 Nexpose versions 6.4.50 and later are vulnerable to an insufficient entropy issue in the CredentialsKeyStorePassword.generateRandomPassword() method. When updating legacy keystore passwords, the application generates a new password with insufficient length (7-12 characters) and a static prefix 'p', resulting in a weak keyspace. An attacker with access to the nsc.ks file can brute-force this password using consumer-grade hardware to decrypt stored credentials.

• CWE-331

• https://www.atredis.com/disclosure

Published

Feb 3, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1811A flaw has been found in bolo-blog bolo-solo up to 2.6.4. Th…8.8
• CVE-2026-1812A vulnerability has been found in bolo-blog bolo-solo up to …9.8
• CVE-2026-18125An out-of-bounds read in the Agent of Ivanti Endpoint Manage…7.5
• CVE-2026-18127External control of a filename in the Core of Ivanti Endpoin…7.7
• CVE-2026-18129Cleartext transmission of sensitive information in the Core …8.1
• CVE-2026-1813A vulnerability was found in bolo-blog bolo-solo up to 2.6.4…9.8
• CVE-2026-18140Uncontrolled recursion in the unknown-key skip path of the a…8.7
• CVE-2026-18141A flaw was found in aap-gateway, a component of Ansible Auto…8.2
• CVE-2026-1815Insufficient session expiration vulnerability in Turkiye Ele…5.7
• CVE-2026-18157A flaw was found in yggdrasil-worker-package-manager. A loca…7.8
• CVE-2026-1816Improper restriction of excessive authentication attempts vu…6.3
• CVE-2026-18171Docker Sandboxes (sbx) applies the read-only intent of a run…5.7