CVE-2026-34635
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A Use of Hard-coded Cryptographic Key vulnerability could result in a security feature bypass. A low-privileged attacker could bypass security measures and gain unauthorized read and write access. Exploitation does not require user interaction, and scope is changed.
Risk Assessment
Security bypass and unauthorized data access could lead to confidentiality and integrity breaches.
Recommendation
Update the software to a version where the cryptographic key is not hard-coded and enforce secure key management practices.
Original NVD description (English source)
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.