CVE-2026-35097
NoneCVSS
—
EPSS
0.4%
Published
Jun 30, 2026
CISA due date
—
The record
KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extended characters. This issue was fixed in the patch published in June 2026.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-41021 Eaton easyE4 uses an insufficiently strong password policy. CWE-521
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-56577 HCL MyCloud was affected with Weak Password Policy. CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2024-40684 IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0… CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521