CVE-2026-101034 — Vulnerability intelligence
—
Published:
- CVSS
- 6.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation.