CVE-2026-50641
NoneCVSS
—
EPSS
0.2%
Published
Jul 29, 2026
CISA due date
—
The record
Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-86715 Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics… CWE-256
- CVE-2026-103094 ServiceNow has remediated an information disclosure vulnerability that was identified in… CWE-256
- CVE-2026-110975 A flaw was found in Kruize Autotune. CWE-256
- CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. CWE-256
- CVE-2026-15933 OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. CWE-256
- CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. CWE-256
- CVE-2026-55164 Lemur manages TLS certificate creation. CWE-256
- CVE-2026-41874 Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. CWE-256