CVE-2026-116054: SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash
A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password hash with insufficient computational effort. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.0.2.0 mitigates this issue. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SH3 Módulo de Gestão/Módulo de Arrecadaçãoto a version that resolves this vulnerability.Fixed in 2026.0.2.0
Event History
Frequently Asked Questions
Who is most exposed to this issue?
Deployments of the SH3 Módulo de Gestão/Módulo de Arrecadação component are exposed if they have not been upgraded to version 2026.0.2.0. The issue can be attacked remotely, but exploitation is reported to require high complexity and high privileges.
Is there a public exploit?
Yes. A public exploit has been disclosed and may be used, although exploitability is reported as difficult.
What is the recommended remediation?
Upgrade the affected SH3 component to version 2026.0.2.0. This version mitigates the weak password-hash issue.