CVE-2026-103548 — Improperly Stored Credentials

CVE-2026-103548

Improperly Stored Credentials PUBLISHED

Description (CNA)

Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password histories to gain access to the MV-90 application as any user.

Affected (CNA)

Vendor / product	Versions
Itron / MV-90 xi	affected 3.0

CWE

CWE-257, CWE-260, CWE-261

References

https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/commits/main/2026/PANW-2026-0002/PANW-2026-0002.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.