CVSS 6.8 (medium) ยท published 2026-10-27
An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.
Weakness: CWE-522
Source: NVD CVE-2026-101034
Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.