CVE-2026-25607

Weak password encoding in STER

CVSS 5.7 MEDIUMEPSS 0.1%CWE-261

Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5.

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy · STER

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://cert.pl/posts/2026/05/CVE-2026-25606 https://www.ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P52000165211572544981480