CVE-2026-107171

EUVD-2026-100894
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
trellixCNA
6.9 MEDIUM
LOCAL
LOW
LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 1.81%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
trellixagent
5.8.4
CNA
Common Weakness Enumeration
References
https://support.trellix.com/s/article/000015866