CVE-2026-6805

HighCVSS 7.5

Published: 07/05/2026(UTC)Updated: 25/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The vulnerability in the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server, enabling an offline brute-force attack on the access code associated with this sharing link.

Risk Assessment

The organization may be exposed to unauthorized access to data, potentially leading to information leaks and violations of user privacy.

Recommendation

It is recommended to secure the sharing feature by implementing additional authentication mechanisms and monitoring access to shared links.

Other vulnerabilities in Cryptobox

CVE-2026-5794Medium
A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another from logging in by triggering an account lockout via a specially crafted request. This can lead to denial of access for the victim.

Original NVD description (English source)

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS