CVE-2026-6805 — Vulnerability on Cryptobox external sharing feature

CVE-2026-6805

Vulnerability on Cryptobox external sharing feature PUBLISHED

Description (CNA)

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.

Affected (CNA)

Vendor / product	Versions
Ercom / Cryptobox	unaffected 4.40.183; unaffected 4.37.248 before v4.38.0

CWE

CWE-280

References

https://info.cryptobox.com/doc/v4.40/4.40.en/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.