Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Septeo IT Solutions UpSignOn 7.19.0 Clear all filters
TI-2026-52792 CVE-2026-75137 · GHSA-qgm4-q464-4557

UpSignOn < 7.19.0 Sensitive Data Exposure in Process Memory after Lock

Priority LOW 29

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00097 Published 2026-09-02 Fixed in 7.19.0 CWE-316
TI-2026-52791 CVE-2026-75136 · GHSA-9pfj-rxxp-9cf2

UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

Priority LOW 30

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any aut…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.0016 Published 2026-09-02 Fixed in 7.19.0 CWE-522
TI-2026-52790 CVE-2026-75135 · GHSA-9258-5wrj-fw57

UpSignOn < 7.19.0 Sensitive Key Retention in Memory

Priority LOW 29

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00097 Published 2026-09-02 Fixed in 7.19.0 CWE-316