CVE-2026-94206Published
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-94206 · Microsoft / collected KEV context
cve-program · CVE-2026-94206
- https://cna.erlef.org/cves/CVE-2026-94206.html
- https://osv.dev/vulnerability/EEF-CVE-2026-94206
- https://github.com/danielberkompas/cloak_ecto/commit/a8fa1642b02f1c445a1ee8794c9095eb0921f8f3
- https://github.com/danielberkompas/cloak/commit/8699e6417a162c39d9f0ef63511bd23d3f38d1d2
- https://github.com/danielberkompas/cloak/commit/681c9702b7cd9afe0e5a840751ab009f550c69a9
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.