OVERVIEW CVE-2026-5380 affects the runZero Platform and involves the improper storage of credentials without sufficient protection. An authorized user could exploit this vulnerability to view cleartext secrets for a subset of credential types and fields. The issue has been classified under CWE-522 (Insufficiently Protected Credentials) and was remediated in version 4.0.260204.2. SEVERITY The vulnerability carries a CVSS v3.1 score of 5.3 (Medium) with a network-based attack vector requiring high complexity and user interaction. No special privileges are required for exploitation, but the attack has high confidentiality impact with no integrity or availability consequences. The relatively low EPSS score of 0.000360 indicates minimal observed exploitation probability in the wild. EXPLOITATION STATUS CVE-2026-5380 is not currently tracked on the CISA Known Exploited Vulnerabilities (KEV) catalog and shows no active exploitation indicators. The vulnerability maintains an inactive status on threat intelligence hot lists. Community attention remains minimal, consistent with the low EPSS and FAUCET Risk Score of 41/100, suggesting limited urgency for immediate organizational response outside of standard patch management cycles.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.0.260204.2CPE matchmatch criteria | cpe:2.3:a:runzero:runzero_platform:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.