Vulnerability in OptimiDoc Server (On-Premise) software

CERT Polska has received a report about vulnerability in OptimiDoc Server (On-Premise) software and participated in coordination of its disclosure.

The vulnerabilityCVE-2026-15933: OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP (for scan delivery), Active Directory (for user list import), and SharePoint credentials, in cleartext via the web administration panel page source, allowing exposure of sensitive third-party authentication data.

This issue was fixed in version 26.08

We thank PaweÅ RÃ³Å¼aÅski from securitum.com for the responsible vulnerability report.

Original source

[email protected] (The Hacker News)

LLMjacking Attack Uses Leaked AWS IAM Key to Steal Paid AI Model Access

Cybernewswire-8 days ago

Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026

[email protected] (The Hacker News)-8 days ago

Vulnerability in OptimiDoc Server (On-Premise) software

Related articles

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

You might Also like

LLMjacking Attack Uses Leaked AWS IAM Key to Steal Paid AI Model Access

Fewer attacks, more force: Link11’s European Cyber Report finds new DDoS records for the first half of 2026

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root