CVE-2026-57262
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Vulnerability in LOGO! Soft Comfort versions before V9. The product uses a static, hardcoded AES master key to encrypt project files. A local attacker can extract the key from application files or memory and use it to decrypt project files or remove passwords.
Risk Assessment
An attacker with local access can decrypt project files and bypass password protection, compromising data confidentiality.
Recommendation
Update LOGO! Soft Comfort to V9 or later. Restrict local access to the system.
Original NVD description (English source)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.