CVE-2026-118991

The record

CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key. getCrypt() pads the backup password with "x" characters and cuts it to 32 bytes to form the AES key, with no salt and no key derivation. The first block of a backup holds a 16 hex digit length field, so decrypting one block confirms a password guess at raw AES speed. An attacker who obtains a backup can recover its password by fast offline guessing, and with it every credential the backup holds.

Affected packages

Related vulnerabilities

• CVE-2026-13576 CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1… CWE-916
• CVE-2026-65629 Use of Password Hash With Insufficient Computational Effort in the jose library allows an… CWE-916
• CVE-2026-116054 A security vulnerability has been detected in SH3. CWE-916
• CVE-2026-116071 rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to… CWE-916
• CVE-2025-30049 The CGM CLININET application stores user passwords as unsalted MD5 hashes. CWE-916
• CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-916
• CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-916
• CVE-2026-81704 openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the… CWE-916