PT-2026-27124 · Kalcaddle · Kalcaddle Kodbox

Vuldb + 1 · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4588

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kalcaddle Kodbox version 1.64

Description A security issue exists in Kalcaddle Kodbox version 1.64 related to the manipulation of the sk argument within the shareSafeGroup function located in the file /workspace/source-code/app/controller/explorer/shareOut.class.php of the Site-level API key Handler component. This manipulation results in the use of a hard-coded cryptographic key. The attack can be initiated remotely, but is considered difficult to exploit. The details of this issue have been publicly disclosed, and the vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-320

CWE-321

Related Identifiers

CVE-2026-4588

Affected Products

Kalcaddle Kodbox

References · 6

• 🔥 https://vulnplus-note.wetolink.com/share/rM8GdIOvQZrw · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4588 · Security Note
• https://twitter.com/VulmonFeeds/status/2036121982752727359 · Twitter Post
• https://vuldb.com/?id.352424 · Note
• https://vuldb.com/?submit.775464 · Note
• https://vuldb.com/?ctiid.352424 · Note