CVE Catalog
CVE-2026-57263
MediumCVSS 6.8Summary
Vulnerability in LOGO! Soft Comfort versions before V9. The project password is stored as an unsalted SHA-256 hash, allowing an attacker with the project file to perform efficient offline dictionary or brute-force attacks.
Risk Assessment
An attacker who obtains the project file can crack the password and gain access to the project.
Recommendation
Update LOGO! Soft Comfort to V9 or later. Use strong passwords and protect project files.
Original NVD description (English source)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.