CVE-2026-50641
Plaintext password storage in Streamsoft Business Intelligence
- State
- Published
- Severity
- 7.1 High
- Published
- Jul 29, 2026
- Updated
- Jul 29, 2026
- Reserved
- Jun 5, 2026
Description
Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database
This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | CERT-PL |
Weaknesses
- CWE-256 Plaintext Storage of a Password
Affected Products
| Product | Versions |
|---|---|
Business IntelligenceStreamsoft |
|
References
- https://cert.pl/posts/2026/07/CVE-2026-50641third-party-advisory
- https://www.streamsoft.pl/business-intelligence/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.