---
id: CVE-2026-86715
title: Clear Text Storage of Password in Crypttech's Vatos DLP
summary: >-
  Plaintext storage of a password vulnerability in Crypttech Crypto and
  Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known
  Domain Credentials.


  This issue affects Vatos DLP: from 1.1.176 before 1.1.243.
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-256
vendor: Crypttech Crypto and Informatics Technologies Industry and Trade Inc.
product: Vatos DLP
affected:
  - vatos_dlp >= 1.1.176 < 1.1.243
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T14:08:53.650496Z'
published: '2026-10-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T14:09:21.809Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-86715'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1432'
tags:
  - cve.org
epss: 0.00131
epssPercentile: 0.02725
ingestedAt: '2026-11-05T16:07:30.281Z'
---

## Overview

Plaintext storage of a password vulnerability in Crypttech Crypto and Informatics Technologies Industry and Trade Inc. Vatos DLP allows Use of Known Domain Credentials.

This issue affects Vatos DLP: from 1.1.176 before 1.1.243.

## Affected

- `vatos_dlp >= 1.1.176 < 1.1.243`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.