CVE-2026-103548: Improperly Stored Credentials

Published Sep 30, 2026

Updated

Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any user.

Affected Software

1 affected component

Itron MV-90 xi=3.0

Event History

Sep 30, 2026

CVE Published

via MITRE·07:45 PM

Data Sourced

via MITRE·07:45 PM

DescriptionWeakness

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

An attacker needs local access and low-level privileges to access the configuration file containing the improperly stored passwords and password histories.

What could an attacker gain by exploiting the stored credentials?

The attacker could decode passwords and password histories, then use them to access the MV-90 application as any user.

How can an organization determine whether it is affected?

Organizations should determine whether they use Itron MV-90 xi version 3.0 and whether local users with low privileges can access its configuration file.

CVE-2026-103548: Improperly Stored Credentials

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could an attacker gain by exploiting the stored credentials?

How can an organization determine whether it is affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could an attacker gain by exploiting the stored credentials?

How can an organization determine whether it is affected?