CVE-2026-81821

Deferred Deferred - Pending Action

Decryption of Sensitive Data in PIMBoards

Publication date: 2026-09-08

Last updated on: 2026-09-11

Assigner: ICS-CERT

Description

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-11

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-81821

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-321	The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker with read access to PIMBoards project files to decrypt and view sensitive information stored within those files.

Impact Analysis

If exploited, it could lead to unauthorized access to confidential data, potential data breaches, and compromise of sensitive information such as credentials or personal details.

Compliance Impact

This vulnerability could result in non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data exposure, leading to legal penalties, fines, or reputational damage.

Mitigation Strategies

Restrict read access to PIMBoards project files to authorized personnel only. Review file permissions and ensure sensitive information is encrypted or protected.

Hi! I’m here to help you understand CVE-2026-81821. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70