CVE-2026-82453

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82453
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82453.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82453
Published
2026-08-29T13:47:55Z
Modified
2026-10-08T02:52:06Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
rust-iot-platform Cleartext Password Storage via User Model
Details

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-256"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82453.json"
}
References

Affected packages

Git / github.com/iot-ecology/rust-iot-platform

Affected ranges

Type
GIT
Repo
https://github.com/iot-ecology/rust-iot-platform
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
5df942ab6bc46a3bf83dbee8c7970554f92c972d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82453.json"