CVE-2026-90510 | dromara orion-visor up to 2.5.7 HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key (Issue 171)

September 12, 2026 Yanac

A vulnerability identified as critical has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/orion-visor-module-asset/orion-visor-module-asset-service/src/main/java/org/dromara/visor/module/asset/service/impl/HostKeyServiceImpl.java. The manipulation leads to use of hard-coded cryptographic key
.

This vulnerability is uniquely identified as CVE-2026-90510. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More