CVE-2026-60044

CVSS 8.7 (high) · published 2026-11-10

The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.

Weakness: CWE-1393

Source: NVD CVE-2026-60044

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.