Cryptobox
Monthly
Cryptobox external sharing feature leaks information via sharing link URLs that enables offline brute-force attacks against access codes. Remote unauthenticated attackers with knowledge of a sharing link can retrieve sufficient data from the server to conduct offline enumeration of the associated access code, compromising the confidentiality of shared content. No public exploit code has been identified, but the low attack complexity and network accessibility make this a practical vulnerability.
Account lockout abuse in Ercom Cryptobox allows any authenticated user to deny another user access by sending a specially crafted request that triggers the platform's lockout mechanism. Specific versions in the 4.37-4.40 range are confirmed affected per ENISA EUVD-2026-26070, and the vendor has released a patch. No active exploitation is confirmed - EPSS stands at 0.04% (13th percentile) and CISA SSVC marks exploitation status as none, placing this firmly in the category of a real but low-urgency availability risk.
Cryptobox external sharing feature leaks information via sharing link URLs that enables offline brute-force attacks against access codes. Remote unauthenticated attackers with knowledge of a sharing link can retrieve sufficient data from the server to conduct offline enumeration of the associated access code, compromising the confidentiality of shared content. No public exploit code has been identified, but the low attack complexity and network accessibility make this a practical vulnerability.
Account lockout abuse in Ercom Cryptobox allows any authenticated user to deny another user access by sending a specially crafted request that triggers the platform's lockout mechanism. Specific versions in the 4.37-4.40 range are confirmed affected per ENISA EUVD-2026-26070, and the vendor has released a patch. No active exploitation is confirmed - EPSS stands at 0.04% (13th percentile) and CISA SSVC marks exploitation status as none, placing this firmly in the category of a real but low-urgency availability risk.