PT-2026-32625 · Progress · Openedge

Published 2026-04-14 · Updated 2026-04-19 · CVE-2025-8095

Positive Technologies (AI Summary)

CVSS v4.0

9.1

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:Y/V:D/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions OpenEdge (affected versions not specified)

Description The OECH1 prefix encoding, used to obfuscate values across the platform, is cryptographically weak. This makes it unsuitable for enterprise applications and stored encodings, as the obfuscation can be reversed, potentially leading to mass credential exposure.

Recommendations Immediately replace OECH1 encodings with any other supported prefix encoding based on symmetric encryption.

Fix

Weakness Enumeration

CWE-257

Related Identifiers

CVE-2025-8095

Affected Products

Openedge

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-8095 · Security Note
• https://community.progress.com/s/article/Unintended-Use-of-OECH1-for-Password-Secrets-Protection · Note
• https://twitter.com/CVEnew/status/2045972381907497198 · Twitter Post
• https://twitter.com/0dayPublishing/status/2044051753549566391 · Twitter Post