CVE-2026-37454

Name of the Vulnerable Software and Affected Versions MSI NBFoundation Service version 2.0.2506.1201

Description Insecure permissions allow a remote attacker to obtain sensitive information by exploiting the 3DES-ECB encryption method. 3DES-ECB (Triple Data Encryption Standard in Electronic Codebook mode) is a symmetric-key block cipher that encrypts data in blocks without using an initialization vector, which can lead to patterns in the ciphertext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.