PT-2026-43406 · Maxkb · Maxkb

Lowliuruibin · Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-45413

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.9.1

Description User passwords are stored using unsalted MD5 hashes. This allows passwords to be easily recovered using rainbow tables or GPU-accelerated brute force attacks.

Recommendations Update to version 2.9.1.

Exploit

Fix

Weakness Enumeration

CWE-328

Related Identifiers

CVE-2026-45413

GHSA-2M4C-MCQ5-Q8XQ

Affected Products

Maxkb

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45413.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-45413 · Security Note
• https://osv.dev/vulnerability/CVE-2026-45413 · Vendor Advisory
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-2m4c-mcq5-q8xq · Note