Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-6805 EUVD-2026-28342GHSA-p3ph-4r57-hh5x

Vulnerability on Cryptobox external sharing feature

Published May 7, 2026 · Updated May 7, 2026 · Assigned by THA-PSIRT

Description

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.

Affected products

VendorProductAffectedFixed
Ercom Cryptobox — 4.40.183

References