Skip to content
Threat Feed
Subscribe

Vendor

Araxis Ltd.

1 brief RSS
low advisory

Araxis Merge: Local credential decryption via DPAPI (CVE-2026-92680)

Araxis Merge for Windows stores server credentials using DPAPI with NULL entropy, allowing an attacker with local user access to decrypt and extract stored credentials from the registry.

Araxis Merge for Windows credential-theft dpapi windows local-exploitation
1r 1t 1c