THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-75135 (MEDIUM 6.1) — UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-loc

[NVD] CVE-2026-75135 (MEDIUM 6.1) — UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-loc

mednvdPublished 2026-09-02

CVE-2026-75135 CVSS: 6.1 MEDIUM Published: 2026-09-02T20:17:36.720

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading a retained backup key from the process memory of UpSignOn.exe, even after the vault has been re-locked. Attackers can extract the backup key from proce

Indicators of compromise

CVE-2026-75135cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75135