Vulnerabilities CVE-2026-73230

CVE-2026-73230

Medium

Open

TLP:CLEAR

Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secrets

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy or predictable secrets. This issue is fixed in version 2026.07.28.

Details

CVSS Score: 5.9
EPSS Score ⓘ: 0.13%

2.8th percentile
CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 11, 2026
Last Modified: Aug 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.