CVE-2026-39908

CVE Enrichment

CVSS: 7.1 HIGH
EPSS: 0.82%
EPSS Percentile: 57.60%
CISA KEV: Not listed

Description

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application attempts to load proxies from the UNC path, triggering an SMB authentication attempt that discloses the NTLMv2 hash, which can then be relayed or cracked offline.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 09-Jun-2026 00:16
Last Modified: 23-Jul-2026 14:10
EPSS Date: 2026-11-07
CWE: CWE-522

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:H /
                            VI:N /
                            VA:N /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

CNA Products / Version Status

openbullet · openbullet2 Source: CNA · [email protected]
Default status: affected

0 ≤ version ≤ 0.3.2 — affected (semver)

packageURL: pkg:github/openbullet/openbullet2
repo: https://github.com/openbullet/openbullet2

References

Last enrichment sync: 08-Nov-2026 05:34
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE reference: CVE-2026-39908 Metasploit Framework 6.5.9 Adds RCE Modules for Network Devices, GitLab and More

CVE (6)

People (2)

Vendors (4)

Products (10)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.