CVE-2026-115739: Medium severity vulnerability
Published Nov 5, 2026
·Updated
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files.
Event History
Nov 5, 2026
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
DescriptionWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
The issue affects DLP on-prem extensions version 11.13.1 and earlier.
2
What access does an attacker need to exploit this issue?
An attacker must have low-level privileges and network access. No user interaction is required.
3
What could an attacker obtain?
A successful attacker could decrypt credentials and evidence files.