CVE-2026-46749
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
SINEC INS (all versions prior to V1.0 SP2 Update 6) uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and an insufficient number of iterations. This allows an attacker to efficiently recover user passwords using brute-force or precomputed attacks (e.g., rainbow tables).
Risk Assessment
Weak password hashing can lead to user account compromise and unauthorized access to the SINEC INS system, threatening data confidentiality and integrity.
Recommendation
Update SINEC INS to version V1.0 SP2 Update 6 or later, which includes improved password hashing with random salt and adequate iteration count.
Other vulnerabilities in SINEC INS
See all- CVE-2026-46748High
In SINEC INS prior to V1.0 SP2 Update 6, a binary is configured with the cap_dac_override capability, bypassing file system permission checks. A local attacker can escalate privileges, modify arbitrary files, and gain root access.
- CVE-2026-46747Medium
A vulnerability in SINEC INS (all versions before V1.0 SP2 Update 6) allows path traversal via the `GET /api/sftp/uploadFiles` endpoint due to improper sanitization of path input. This enables access to unauthorized file system locations.
- CVE-2026-46746High
In SINEC INS versions prior to V1.0 SP2 Update 6, user input is not properly sanitized in the /api/sftp/uploadFiles endpoint, allowing injection of shell command payloads via crafted directory names. These payloads are stored and executed when directory listings are retrieved.
Original NVD description (English source)
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.