CVE-2026-109582: Medium severity DOS Co., Ltd. SS1 vulnerability
Published Nov 9, 2026
·Updated
Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained.
Affected Software
1 affected component
DOS Co., Ltd. SS1
Event History
Nov 9, 2026
CVE Published
via MITRE·07:56 AM
Data Sourced
via MITRE·07:56 AM
DescriptionSeverity
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The published vector indicates local access is required. No privileges or user interaction are required according to the supplied severity vector.
2
What is the impact if the issue is exploited?
Sensitive information used by SS1 may be obtained. The supplied vector indicates low confidentiality impact and no integrity or availability impact.