What is CVE-2026-2103?

CVE-2026-2103 is a high-severity vulnerability in Infor Syteline Erp, classified under Use of Hard-coded Cryptographic Key. CVSS score: 7.1/10. Published 2026-02-06.

How severe is CVE-2026-2103?

High severity. CVSS v3 base score is 7.1 out of 10.

Vulnerability in Infor Syteline Erp

CVE-2026-2103

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.

EPSS: 0.001 (0.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

Infor Syteline Erp — versions 10.0.8803.16889
Infor Syteline_erp — versions 10.0.8803.16889

Weakness classification (CWE)

References

cves@blacklanternsecurity.com (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2026-2103?: CVE-2026-2103 is a high-severity vulnerability in Infor Syteline Erp, classified under Use of Hard-coded Cryptographic Key. CVSS score: 7.1/10. Published 2026-02-06.
How severe is CVE-2026-2103?: High severity. CVSS v3 base score is 7.1 out of 10.