Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-58744 EUVD-2025-206307GHSA-9259-996q-pvq8

Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by SRA

Description

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in

Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key.

This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

Affected products

VendorProductAffectedFixed
Milner ImageDirector Capture 7.0.9.0 – < 7.6.3.25808 7.6.3.25808

References