CVE-2026-37454

HighCVSS 7.5

Published: 25/06/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

An insecure permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information by exploiting 3DES-ECB encryption.

Risk Assessment

The organization is at risk of sensitive data leakage, which could be intercepted by a remote attacker without authorization.

Recommendation

Immediately update MSI NBFoundation Service to the latest version that fixes this vulnerability and consider using stronger encryption algorithms.

Other vulnerabilities in MSI NBFoundation Service

CVE-2026-37453High
An insecure permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the MSI_SERVICE_2 pipe.

Original NVD description (English source)

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DES-ECB encryption