CVE-2026-86715
HIGHCVSS 7.1/10
Last modified
CVE-2026-86715 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This issue affects Vatos DLP: from 1.1.176 before 1.1.243..
Description
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Crypttech Crypto and Informatics Technologies Industry and Trade Inc. | Vatos DLP | >= 1.1.176, < 1.1.243 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-86715?
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.
This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
How severe is CVE-2026-86715?
CVE-2026-86715 has a CVSS score of 7.1/10 (HIGH severity).
How do I fix CVE-2026-86715?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8671Insertion of sensitive information into log file vulnerabili…7.5
- CVE-2026-86710The Login with QR WordPress plugin through 1.0.0 does not ve…9.8
- CVE-2026-86711electerm before 5.3.15 exposes 40+ main-process functions th…7.4
- CVE-2026-86712SiYuan before 3.8.2 trusts the attacker-writable text/siyuan…8.8
- CVE-2026-86713PX4 Autopilot through 1.17.0 contains a use-after-free vulne…7.1
- CVE-2026-86714PX4 Autopilot through 1.17.0 contains a stack buffer over-re…5.4
- CVE-2026-86716A vulnerability was determined in Cesanta mJS up to 1.26. Af…7.3
- CVE-2026-86717The Insurify WordPress plugin through 1.0 does not have aut…9.1
- CVE-2026-86718WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…7.1
- CVE-2026-86719WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…5.4
- CVE-2026-8672Use of default password vulnerability in syslink software AG…5.1
- CVE-2026-86720WWBN AVideo through commit c3edcc274c389816d434acadac07ee78e…8.1
Are you affected by CVE-2026-86715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST