CVE-2026-90457

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing algorithm used for the same password on another authentication path. A party able to read this file, including a local user or a party with access to a configuration backup, could feasibly recover the underlying password through offline computation, compromising the administrative credential across every path that accepts it.

• CWE-916

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-254-01

Published

Sep 11, 2026

Last Modified

Oct 2, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90451An example environment-configuration file ships with a fixed…5.9
• CVE-2026-90452Requests from the reverse proxy to the identity-provider ser…5.3
• CVE-2026-90453A file-upload handler redirects the authenticated client's b…3.5
• CVE-2026-90454A deployment mode intended to expose only read access to a b…4.3
• CVE-2026-90455A prior update that raised a bundled HTTP client library to …3.7
• CVE-2026-90456An example environment-configuration file for a bundled inve…8.1
• CVE-2026-90458OpenStack Ironic before 39.0.1 allows DELETE and GET via ven…5.4
• CVE-2026-9046A potential insecure permissions vulnerability was reported …7.3
• CVE-2026-90460An issue was discovered in OpenStack Keystone before 29.0.3.…7.6
• CVE-2026-90461OpenStack Ironic through 38.0.0 may send a username and pass…6.3
• CVE-2026-90462A flaw was found in SSSD. When configured with the LDAP acce…5.4
• CVE-2026-90463A flaw was found in the sssd NSS responder. This input valid…4