What’s Vulnerable › Vulnerabilities

CVE-2026-13510: SimStudioAI sim Password Protection deployment.ts weak hash

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-28 · updated 2026-10-25
• Weakness: CWE-327

Description

A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.

Affected products

• SimStudioAI sim: 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.6.4, 0.6.5 (+87)

References

• https://github.com/simstudioai/sim/
• https://github.com/simstudioai/sim/issues/4759
• https://github.com/simstudioai/sim/pull/4760
• https://vuldb.com/cve/CVE-2026-13510
• https://vuldb.com/submit/838842
• https://vuldb.com/vuln/374518
• https://vuldb.com/vuln/374518/cti

Get alerted when CVE-2026-13510 or the next vulnerability affects your stack