CVE-2026-109582

Quick assessment

Affected

DOS Co., Ltd. SS1

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

由 DOS Co., Ltd. 提供的 SS1 产品存在敏感信息存储不安全的漏洞，攻击者可能获取该产品所使用的敏感信息。

CVSS 5.1 · Medium Updated Nov 09, 2026

Possible ATT&CK Techniques 1 AI

T1557 · Adversary-in-the-Middle

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. Sensitive information used by the product may be obtained.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

敏感信息的不安全存储

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
DOS Co., Ltd.	SS1	0 ~ Agent version 17.0.0.50 (Media Versions 17.0.0e)	-

II. Public POCs for CVE-2026-109582

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-109582

请登录查看更多情报信息。

Other References for CVE-2026-109582 (2)

https://www.cve.org/CVERecord?id=CVE-2026-109582

IV. Related Vulnerabilities

Same product: SS1

Same vendor: DOS Co., Ltd.

Same weakness: CWE-922