CVE-2026-50641

Summary

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database

This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

Affected Software

Weaknesses

• CWE-256: CWE-256 Plaintext Storage of a Password

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://cert.pl/posts/2026/07/CVE-2026-50641
• https://www.streamsoft.pl/business-intelligence/

• ←Previous
• Next→