CVE-2026-107829

{
  "etk_id": "ETK-2026-1035",
  "cve_id": "CVE-2026-107829",
  "display_id": "CVE-2026-107829",
  "ghsa_id": "GHSA-7r6r-2h95-gg56",
  "euvd_id": "EUVD-2026-95309",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Weak password hashing in Jivejdon",
  "summary": "Jivejdon through version 5.0 stores account passwords using unsalted MD5 hashes. An attacker who obtains the credential database, including through SQL injection, may be able to recover user passwords offline.",
  "mitigation": "Restrict database access and remediate SQL injection exposure immediately; require password resets if credential data may have been accessed. Migrate password storage to a salted, adaptive password hash, as no fixed Jivejdon release is recorded.",
  "vendor": "banq",
  "product": "jivejdon",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 5.0"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "jivejdon",
      "purl": null
    }
  ],
  "cwes": [
    916
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.002,
  "epss_percentile": 0.0887,
  "epss_asof": "2026-10-21",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 8.141889316666667,
  "t0_at": "2026-10-08T21:51:33.503000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-08T21:51:33.503000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-08T21:51:33.503000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107829"
    }
  }
}