LOGO! Soft Comfort Hardcoded AES Master Key Decryption Vulnerability
CVE-2026-57262 Published on August 11, 2026
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.
Weakness Type
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
Products Associated with CVE-2026-57262
Want to know whenever a new CVE is published for Siemens Logo Soft Comfort? stack.watch will email you.
Affected Versions
Siemens LOGO! Soft Comfort:- Before V9 is affected.