What is CVE-2026-92749?

CVE-2026-92749 is a high-severity vulnerability in Chaitin Safeline, classified under Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG). CVSS score: 8.1/10. Published 2026-09-16.

How severe is CVE-2026-92749?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Chaitin Safeline

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator session cookies to gain control of protected sites.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Chaitin Safeline

Weakness classification (CWE)

CWE-338 — Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

References

disclosure@vulncheck.com (issue-tracking)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-92749?: CVE-2026-92749 is a high-severity vulnerability in Chaitin Safeline, classified under Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG). CVSS score: 8.1/10. Published 2026-09-16.
How severe is CVE-2026-92749?: High severity. CVSS v3 base score is 8.1 out of 10.