https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:06:24.826732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-35054 CVE-2025-35054 — Newforma Info Exchange (NIX) insufficiently protected credentials 2026-10-06T23:06:24.841572+00:00

Affected: Newforma Project Center

Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>\Credentials'. The credentials are encrypted but the encryption key is stored in the same registry location. Authenticated users can access both the credentials and the encryption key. If these are Active Directory credentials, an attacker may be able to gain access to additional systems and resources.