CVE-2026-115739 · Other
NO FIX YET
DLP on-prem extensions version 11.13.1 and earlier contain a hard-coded cryptographic key. A remote attacker can use it to decrypt stored credentials and evidence files.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Organisations running the on-prem DLP extensions at version 11.13.1 or earlier. Sources do not say which deployment settings make an instance reachable, or whether managed or cloud DLP is affected.
Not affected if managed-hosting
Who cares dlp, enterprise, on-prem
Unknown from the sources.
No fix yet, per the sources.
Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to decrypt credentials and evidence files.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.