CVE-2026-75112CWE-916

CVE-2026-75112

published August 20, 2026

CVSS
6.9
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password hashes. If an attacker gains access to an unencrypted system backup, the weakly hashed credentials could be more easily compromised.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
6.9 · CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.3th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2026-08-20T00:17Z
References (1)
EPSS history
Timeline
  • 19 AUG 19:06Z
    OTTO® Fleet Manager – Weak Password Hashing Configuration
    cvelistv5