PT-2026-65789 · Streamsoft · E-Business Intelligence

Kamil Dąbkowski · CVE-2026-50641 · Published 2026-07-29 · Updated 2026-07-29

NVD

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database

This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2026-50641

Affected Products

E-Business Intelligence

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50641 · Security Note
• https://cert.pl/posts/2026/07/CVE-2026-50641 · Note
• https://streamsoft.pl/business-intelligence · Note