← Back to search

CVE-2026-78835

9.8 CRITICAL

Published 2026-10-09 · Updated 2026-10-13

AI risk analysis

Summary
The vulnerability allows attackers to access credentials without sufficient protection, potentially leading to full system compromise. This is critical because it directly impacts authentication security.
Exploitability
Exploitation is likely straightforward with no special preconditions required, as the flaw involves insufficient credential protection mechanisms.
Blast radius
If exploited, this vulnerability could allow attackers to gain unauthorized access to sensitive systems and data across the network, potentially leading to widespread compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Rocket Remote Desktop version 18.0.8583.2 or later to address the insufficiently protected credentials issue.
credentialauthenticationremote-desktop

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-522

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.