PT-2026-65789 · Streamsoft · E-Business Intelligence

Kamil Dąbkowski · CVE-2026-50641 · Publicado 2026-07-29 · Atualizado 2026-07-29

NVD

CVSS v4.0

7.1

Alta

Vetor base

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database

This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

Correção

Enumeração de Fraquezas

CWE-256

Identificadores relacionados

CVE-2026-50641

Produtos afetados

E-Business Intelligence

Referências · 3

• https://cert.pl/posts/2026/07/CVE-2026-50641 · Nota
• https://streamsoft.pl/business-intelligence · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-50641 · Nota de Segurança