PT-2026-70882 · Ente · Ente
CVE-2026-73230
·
Published
2026-08-11
·
Updated
2026-08-11
CVSS v4.0
5.9
Medium
| Vector | AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ente versions prior to 2026.07.28
Description
The 2of3 card format version 1 stores the secret byte length and 32-bit FNV-1a checksum (a non-cryptographic hash function used for fast data indexing) in cleartext on every card. This allows an attacker possessing a single card to perform offline testing of candidate secrets to recover those that are predictable or have low entropy.
Recommendations
Update to version 2026.07.28.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ente