Vulnerability · Published Oct 30, 2026 · Assigned by TR-CERT
CVE-2026-86715Clear Text Storage of Password in Crypttech's Vatos DLP
High 7.1
In plain English
A high-severity security flaw in Vatos DLP from Crypttech Crypto and Informatics Technologies Industry and Trade Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.1%top 97.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials. This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Crypttech Crypto and Informatics Technologies Industry and Trade Inc. | Vatos DLP | 1.1.176 – before 1.1.243 |
Weakness: CWE-256 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1432 government-resource