Live › vulnerability › CVE-2026-86715
Vatos DLP, a data loss prevention product from Crypttech, stores a password in plaintext. An attacker who can read the stored data can obtain domain credentials and use them against the network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 14:30 UTC. All times on this page are UTC.
Organizations running Vatos DLP from version 1.1.176 up to but not before 1.1.243 are exposed. The sources do not describe the exact configuration or deployment that stores the password, so the specific systems to inspect are unknown.
No product ranges from the sources yet.
1.1.176 up to but not including 1.1.243.1.1.243 or later, per the affected range in NVD.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.
This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
This page as .md · .json · in your agent: get_signal("CVE-2026-86715")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.