CVE-2025-26486

CVE-2025-26486 describes multiple cryptographic weaknesses in Beta80 Life 1st Identity Manager version 1.5.2.14234, including broken algorithms, insufficient computational effort for password hashes, and weak hashing with predictable salts. With a CVSS score of 6.0 (Medium), an attacker with access to password hashes can exploit these vulnerabilities locally to bruteforce user passwords or find collisions, ultimately gaining unauthorized access to applications relying on Life 1st Identity Manager for authentication. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.