Skip to content
OpenAdvisories

Vendor

Ditec a.s.

1 known vulnerabilities.

Products

D.Launcher 2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-8993

    Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks

    D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker infrastr…

    Ditec a.s. D.Launcher 2