SZB-8b7bccbc25
Kriptek Vatos DLP stores passwords in plaintext (EUVD-2026-113945)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Kriptek
- Product
- Vatos DLP
- First seen
Summary
The EUVD entry describes a plaintext password storage flaw in Kriptek's Vatos DLP, scored 7.1 under CVSS v3.1. The listing says the issue allows use of known domain credentials, and the affected versions are truncated in the feed.
If you use Kriptek
Check whether your deployment runs Vatos DLP and identify the affected version
Apply any vendor fix or update from Kriptek as soon as it is available
Rotate domain and service credentials that may have been stored in Vatos DLP
Restrict access to the DLP system's configuration and credential stores
What the sources say 1
· Mastodon: “Plaintext storage of a password vulnerability in Kriptek Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.” Source