CVE-2026-116054

2.2 LOW

Published 2026-10-25 · Updated 2026-10-26

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password hash with insufficient computational effort. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The exploit has been disclosed publicly and may be used. Upgrading to version 2026.0.2.0 mitigates this issue. Upgrading the affected component is recommended.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-326, CWE-916

All references

https://medium.com/@warlleyfreire/sh3-public-management-system-stored-user-credentials-using-a-reversible-xor-based-mechanism-6aa3793804a2?postPublishedType=initial
https://vuldb.com/cve/CVE-2026-116054
https://vuldb.com/submit/997072
https://vuldb.com/vuln/426138
https://vuldb.com/vuln/426138/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

LOWCVE-2026-105156PoC
LOWCVE-2026-112026PoC
LOWCVE-2026-112029PoC
UNSCOREDCVE-2025-30049
MEDIUMCVE-2026-105193
UNSCOREDCVE-2026-105804PoC
MEDIUMCVE-2026-105996
MEDIUMCVE-2026-107829PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.