CVE-2026-50641

Received Received - Intake

Streamsoft Business Intelligence Plaintext Password Storage Vulnerability

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: CERT.PL

Description

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-07-30

AI Q&A

2026-07-30

EPSS Evaluated

N/A

NVD

CVE-2026-50641

Affected Vendors & Products

Vendor	Product	Version / Range
streamsoft	business_intelligence	6.8.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-256	The product stores a password in plaintext within resources such as memory or files.

Attack-Flow Graph

Executive Summary

This vulnerability involves Streamsoft Business Intelligence (BI) storing user passwords in plaintext within the database. This means passwords are not encrypted or hashed, making them easily readable if the database is compromised.

Detection Guidance

Check if your Streamsoft Business Intelligence version is below 6.8.0.0. Inspect database tables storing user credentials for plaintext passwords. Review logs for unauthorized access attempts.

Impact Analysis

If an attacker gains access to the database, they can retrieve all plaintext passwords, leading to unauthorized account access. Users should change their passwords immediately, especially if they reuse passwords elsewhere.

Compliance Impact

Storing passwords in plaintext violates data protection regulations like GDPR and HIPAA, which require proper security measures to protect sensitive data. This could result in legal penalties and reputational damage.

Mitigation Strategies

Upgrade to Streamsoft Business Intelligence version 6.8.0.0 or later. Force users to change passwords on next login. Encrypt existing plaintext passwords in the database.

Hi! I’m here to help you understand CVE-2026-50641. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70