{"id":"CVE-2026-78835","published":"2026-10-09T19:16:42.420","lastModified":"2026-10-13T19:19:54.367","description":"Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-522"],"vendors":[],"products":[],"references":[{"url":"http://rocket.com","tags":[]},{"url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2026-001/","tags":[]},{"url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2026-001/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability allows attackers to access credentials without sufficient protection, potentially leading to full system compromise. This is critical because it directly impacts authentication security.","exploitability":"Exploitation is likely straightforward with no special preconditions required, as the flaw involves insufficient credential protection mechanisms.","blast_radius":"If exploited, this vulnerability could allow attackers to gain unauthorized access to sensitive systems and data across the network, potentially leading to widespread compromise.","remediation":"Upgrade to Rocket Remote Desktop version 18.0.8583.2 or later to address the insufficiently protected credentials issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["credential","authentication","remote-desktop"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:46:46.414Z"}}