CVE-2026-60044: Static backup password
Published Nov 10, 2026
·Updated
The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.
Event History
Nov 10, 2026
CVE Published
via MITRE·08:37 AM
Data Sourced
via MITRE·08:37 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it. No privileges or user interaction are required.
2
What is exposed if the issue is exploited?
The contents of backups created by the application may be accessed, resulting in a total loss of confidentiality. Integrity and availability impacts are not identified in the provided data.
3
Are affected backups protected by a per-installation or changeable password?
The backup password is described as weak and static, so the provided data does not indicate that it is unique to an installation or backup.