Search/CVE-2026-45413
● CVE

CVE-2026-45413

DiscoveredMay 26, 2026UpdatedJul 24, 2026

MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.1, user passwords are stored using unsalted MD5 hashes, making them trivially crackable via rainbow tables or GPU-accelerated brute force (hashcat). This vulnerability is fixed in 2.9.1.

View graph Watch Export
CVSS v3.1
—
EPSS
0.08%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
● 0.00pp
0.08% → 0.08% over 3 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
May 26, 2026
Disclosure — published as a CVE record. · last revised by NVD Jul 24, 2026