What’s Vulnerable › Vulnerabilities
CVE-2026-75112: OTTO® Fleet Manager – Weak Password Hashing Configuration
- Severity: medium (CVSS 6.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-19 · updated 2026-08-28
- Weakness: CWE-916
Description
A security issue exists within OTTO® Fleet Manager. The vulnerability stems from the use of an insufficient work factor in the bcrypt password hashing implementation, which could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password hashes. If an attacker gains access to an unencrypted system backup, the weakly hashed credentials could be more easily compromised.
Affected products
- Rockwell Automation OTTO® Fleet Manager: through V2.36.2
References
Get alerted when CVE-2026-75112 or the next vulnerability affects your stack