Weak Password Hash Vulnerability in SH3 Módulo de Gestão/Módulo de Arrecadação
CVE-2026-116054

2.1LOW

Key Information:

Vendor

SH3 Informática Ltda

Status
Sh3
Vendor
CVE Published:
25 October 2026

What is CVE-2026-116054?

A significant security vulnerability has been identified in the SH3 Módulo de Gestão/Módulo de Arrecadação. This issue arises from a functional flaw that leads to password hashes being generated with insufficient computational effort. This weakness facilitates remote exploitation, albeit with a high degree of complexity. The publicly disclosed exploit indicates that the problem can be targeted by attackers looking to compromise password security. It is crucial for users to upgrade to version 2026.0.2.0 to rectify this vulnerability and enhance their system's security.

Affected Version(s)

SH3

References

https://vuldb.com/vuln/426138
vdb-entry
https://vuldb.com/vuln/426138/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116054
third-party-advisory

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0x5ea3o1f (VulDB User)
.