CVE-2026-116071 - rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption
CVE ID :CVE-2026-116071 Published : Oct. 25, 2026, 12:16 p.m. | 2 hours, 6 minutes ago Description :rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password....