CVE-2026-5224 PUBLISHED

Sensitive Data Exposure in Kriptek Crypto's Cryptosim

Assigner: TR-CERT
Reserved: 31.03.2026 Published: 18.08.2026 Updated: 18.08.2026

Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade Inc. Cryptosim allows Retrieve Embedded Sensitive Data.

This issue affects Cryptosim: before 3.1.0.229.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 5.7

Attack Vector	Adjacent Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	Kriptok Crypto and Information Technologies Industry Trade Inc.
Product	Cryptosim
Versions	Default: unaffected affected from 0 to 3.1.0.229 (excl.)

Credits

Kaan BEKAR finder

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0852

Problem Types

CWE-312 Cleartext storage of sensitive information CWE

Impacts

CAPEC-37 Retrieve Embedded Sensitive Data