{"id":"CVE-2026-86715","kind":"vulnerability","aliases":["CVE-2026-86715"],"related":[],"title":"Crypttech Vatos DLP: plaintext password storage exposes stored domain credentials","description":"Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.\n\nThis issue affects Vatos DLP: from 1.1.176 before 1.1.243.","summary":"Vatos DLP, a data loss prevention product from Crypttech, stores a password in plaintext. An attacker who can read the stored data can obtain domain credentials and use them against the network.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["crypttech","vatos-dlp","vendor","windows"],"not_affected_if":["product-not-installed","version-1.1.243-or-later"],"how_to_check":"- Check whether Vatos DLP is installed and its version; the affected range is `1.1.176` up to but not including `1.1.243`.\n- Confirm the installed version from the product's own about or version screen, since the sources do not name a file or command.","fix":"- Vatos DLP: move to `1.1.243` or later, per the affected range in NVD.","status":"open","published_at":"2026-10-30T14:17:10+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","triaged_at":"2026-10-30T14:32:41+00:00","updated_at":"2026-10-30T14:32:41+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-30T14:32:41Z","model":"claude-haiku-5-5","output":{"fix":"- Vatos DLP: move to `1.1.243` or later, per the affected range in NVD.","reach":"unknown","title":"Crypttech Vatos DLP: plaintext password storage exposes stored domain credentials","impact":"high","summary":"Vatos DLP, a data loss prevention product from Crypttech, stores a password in plaintext. An attacker who can read the stored data can obtain domain credentials and use them against the network.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["vatos-dlp","windows","crypttech"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker reads stored plaintext password and reuses domain credentials","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-86715 for the attack vector and whether a vendor advisory names the exact storage location and a fix path.","how_to_check":"- Check whether Vatos DLP is installed and its version; the affected range is `1.1.176` up to but not including `1.1.243`.\n- Confirm the installed version from the product's own about or version screen, since the sources do not name a file or command.","plain_action":"","needs_analyst":true,"not_affected_if":["version-1.1.243-or-later","product-not-installed"],"who_is_affected":"Organizations running Vatos DLP from version 1.1.176 up to but not before 1.1.243 are exposed. The sources do not describe the exact configuration or deployment that stores the password, so the specific systems to inspect are unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000705,"input_tokens":4128,"output_tokens":585,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-86715':13A,16A '1.1.176':85C '1.1.243':87C 'affect':81C 'allow':73C 'attack':38B 'credenti':10A,48B,78C 'crypto':63C 'crypttech':1A,17B,31B,62C 'cve':11A,14A 'data':26B,44B 'dlp':3A,20B,24B,72C,83C 'domain':9A,47B,77C 'expos':7A 'inc':70C 'industri':67C 'informat':65C 'issu':80C 'known':76C 'loss':27B 'network':54B 'obtain':46B 'password':5A,34B,59C 'plaintext':4A,36B,55C 'prevent':28B 'product':29B 'read':41B 'storag':6A,56C 'store':8A,32B,43B 'technolog':66C 'trade':69C 'use':50B,74C 'vato':2A,19B,23B,71C,82C 'vatos-dlp':18B 'vendor':21B 'vulner':60C 'window':22B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Vatos DLP from version 1.1.176 up to but not before 1.1.243 are exposed. The sources do not describe the exact configuration or deployment that stores the password, so the specific systems to inspect are unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:17:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86715","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86715","severity":null,"published_at":"2026-10-30T14:17:10+00:00","modified_at":"2026-10-30T14:17:10+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","fetched_at":"2026-10-30T14:30:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}