CVE-2026-82453highCWE-256

CVE-2026-82453: high-severity vulnerability in iot-ecology rust-iot-platform

rust-iot-platform Cleartext Password Storage via User Model

Published · Updated

Follow this CVE+ Monitor rust-iot-platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
iot-ecology · rust-iot-platform
Related CVEs — iot-ecology rust-iot-platform

In the same product, most dangerous first.

CVE-2026-82452CRITICALrust-iot-platform Authentication Bypass via Missing Request GuardsEPSS 0.8%CVE-2026-71278CRITICALrust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script EvaluationEPSS 0.7%CVE-2026-71277CRITICALrust-iot-platform Authentication Bypass via Non-Validated Authorization HeaderEPSS 0.4%