https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-03T09:23:52.593083+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116071 CVE-2026-116071 — rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption 2026-11-03T09:23:52.594380+00:00

Affected: rotki

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the database containing exchange API keys, secrets, wallet addresses and transaction history.