7.7
Élevée
CVE-2026-81576 If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies…
Description
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to another handle.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| codemeter-runtime 9.00 | 9.00 → < 9.10 | 9.10 |
| codemeter-runtime 8.00 | 8.00 → < 8.41a | 8.41a |
| codemeter-runtime | 7.00 | Pas de correctif indiqué |
| codemeter-runtime | 6.00 | Pas de correctif indiqué |
Autres CVE de codemeter-runtime
Les 5 CVE de codemeter-runtime →
CVE-2026-81575
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which…
7.5
Élevée
CVE-2026-81574
In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases,…
8.2
Élevée
CVE-2026-81573
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not…
8.6
Élevée
CVE-2026-81572
In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file…
7.8
Élevée