VULNERABILITY INTELLIGENCE
CVE-2026-92921
CVSS score4.9 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-09-17
Last modified2026-09-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attackers with database access can recover plaintext passwords through offline dictionary or brute-force attacks due to negligible computational effort.
Weakness classification
- disclosure@vulncheck.com: CWE-916