CVE-2026-2103 Use of Hard-Coded Cryptographic Key for Password Storage
Attackers can decrypt stored credentials using hard-coded keys, leading to data exposure and account takeover in Infor SyteLine ERP.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-2103?
CVE-2026-2103 is a high-severity vulnerability in Infor SyteLine ERP, published on 6 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.
Which versions are affected by CVE-2026-2103?
It affects 1 product.
Products include Infor Syteline Erp.
How do I fix CVE-2026-2103?
No fix has been published for CVE-2026-2103 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-2103 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-2103 exists.
Sources
Also known as GHSA-5q75-fhmp-pjmr.