VULNERABILITY INTELLIGENCE
CVE-2026-11347
EPSS probability0.07%
CISA KEVNot currently listed
Published2026-06-05
Last modified2026-06-17
Description
The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can leverage these vulnerabilities to decrypt sensitive obfuscated strings, including ConnectionString values containing database credentials from appsettings.json.
Weakness classification
- 86c47df7-7d28-48da-920a-6423c52fd3da: CWE-321