PT-2026-6732 · Infor · Infor Syteline Erp

Daniel Mansur + 2 · Published 2026-02-06 · Updated 2026-04-09 · CVE-2026-2103

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infor SyteLine ERP (affected versions not specified)

Description The software utilizes hard-coded, static cryptographic keys for encrypting stored credentials, including user passwords, database connection strings, and API keys. These encryption keys are consistent across all installations. An attacker gaining access to the application binary and database can decrypt all stored credentials. This impacts all installations of the software, as the keys are universal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

CVE-2026-2103

Affected Products

Infor Syteline Erp

References · 10

• 🔥 https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2103 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2103 · Vendor Advisory
• https://t.me/CVEtracker/43946 · Telegram Post
• https://twitter.com/_r_netsec/status/2020871083273200098 · Twitter Post
• https://twitter.com/CVEnew/status/2019821342179168745 · Twitter Post
• https://t.me/RNetsec/22553 · Telegram Post
• https://twitter.com/BlackLanternLLC/status/2019818805099393300 · Twitter Post
• https://t.me/defcon_news/133914 · Telegram Post
• https://twitter.com/_r_netsec/status/2042297260017664462 · Twitter Post