CVE catalog

CVE-2026-6332

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of c

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.13% · Oct 25, 2026

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpeecostruxure_machine_expert_hvacNot reported1.10.0fixed
Cpeecostruxure_machine_expert_hvacNot reported1.10.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpeecostruxure_machine_expert_hvaccpeNot reported1.10.0Not reportedNot reportedNot reported
Cpeecostruxure_machine_expert_hvaccpeNot reported1.10.0Not reportedNVD-CVE-2026-6332Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CISA cybersecurity advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]