CVE-2026-86715: Clear Text Storage of Password in Crypttech's Vatos DLP
Published Oct 30, 2026
·Updated
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.
This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
Event History
Oct 30, 2026
CVE Published
via MITRE·01:41 PM
Data Sourced
via MITRE·01:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which Vatos DLP versions are affected?
Vatos DLP versions from 1.1.176 through versions before 1.1.243 are affected. Version 1.1.243 is not identified as affected by the provided information.
2
What access does an attacker need to exploit this issue?
The vulnerability has a local attack vector and requires low privileges. It does not require user interaction.
3
What could an attacker gain by exploiting the vulnerability?
An attacker may obtain or use known domain credentials because a password is stored in plaintext. The reported impact includes high confidentiality and integrity impact, with no availability impact.