CVE-2026-13510
Full vulnerability record from the local CVENow database.
Description
A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
Severity
LOW
CVSS score
2.9
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-06-28 23:16:47.263000
Last modified
2026-10-25 17:10:00.197000
View original CVE JSON
{
"id": "CVE-2026-13510",
"sourceIdentifier": "[email protected]",
"published": "2026-06-28T23:16:47.263",
"lastModified": "2026-10-25T17:10:00.197",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in SimStudioAI sim up to 0.6.92. Affected by this vulnerability is an unknown functionality in the library apps/sim/lib/core/security/deployment.ts of the component Password Protection Handler. Performing a manipulation results in use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitation appears to be difficult. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance."
},
{
"lang": "es",
"value": "Se encontró una vulnerabilidad en SimStudioAI sim hasta 0.6.92. Afectada por esta vulnerabilidad es una funcionalidad desconocida en la biblioteca apps/sim/lib/core/security/deployment.ts del componente Gestor de Protección de Contraseña. Realizar una manipulación resulta en el uso de un hash débil. El ataque puede ser llevado a cabo de forma remota. La complejidad del ataque se califica como alta. La explotación parece ser difícil. El exploit se ha hecho público y podría ser usado. La solicitud de extracción para solucionar este problema espera ser aceptada."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SimStudioAI",
"product": "sim",
"cpes": [
"cpe:2.3:a:sim:sim:*:*:*:*:*:*:*:*"
],
"modules": [
"Password Protection Handler"
],
"versions": [
{
"version": "0.6.0",
"status": "affected"
},
{
"version": "0.6.1",
"status": "affected"
},
{
"version": "0.6.2",
"status": "affected"
},
{
"version": "0.6.3",
"status": "affected"
},
{
"version": "0.6.4",
"status": "affected"
},
{
"version": "0.6.5",
"status": "affected"
},
{
"version": "0.6.6",
"status": "affected"
},
{
"version": "0.6.7",
"status": "affected"
},
{
"version": "0.6.8",
"status": "affected"
},
{
"version": "0.6.9",
"status": "affected"
},
{
"version": "0.6.10",
"status": "affected"
},
{
"version": "0.6.11",
"status": "affected"
},
{
"version": "0.6.12",
"status": "affected"
},
{
"version": "0.6.13",
"status": "affected"
},
{
"version": "0.6.14",
"status": "affected"
},
{
"version": "0.6.15",
"status": "affected"
},
{
"version": "0.6.16",
"status": "affected"
},
{
"version": "0.6.17",
"status": "affected"
},
{
"version": "0.6.18",
"status": "affected"
},
{
"version": "0.6.19",
"status": "affected"
},
{
"version": "0.6.20",
"status": "affected"
},
{
"version": "0.6.21",
"status": "affected"
},
{
"version": "0.6.22",
"status": "affected"
},
{
"version": "0.6.23",
"status": "affected"
},
{
"version": "0.6.24",
"status": "affected"
},
{
"version": "0.6.25",
"status": "affected"
},
{
"version": "0.6.26",
"status": "affected"
},
{
"version": "0.6.27",
"status": "affected"
},
{
"version": "0.6.28",
"status": "affected"
},
{
"version": "0.6.29",
"status": "affected"
},
{
"version": "0.6.30",
"status": "affected"
},
{
"version": "0.6.31",
"status": "affected"
},
{
"version": "0.6.32",
"status": "affected"
},
{
"version": "0.6.33",
"status": "affected"
},
{
"version": "0.6.34",
"status": "affected"
},
{
"version": "0.6.35",
"status": "affected"
},
{
"version": "0.6.36",
"status": "affected"
},
{
"version": "0.6.37",
"status": "affected"
},
{
"version": "0.6.38",
"status": "affected"
},
{
"version": "0.6.39",
"status": "affected"
},
{
"version": "0.6.40",
"status": "affected"
},
{
"version": "0.6.41",
"status": "affected"
},
{
"version": "0.6.42",
"status": "affected"
},
{
"version": "0.6.43",
"status": "affected"
},
{
"version": "0.6.44",
"status": "affected"
},
{
"version": "0.6.45",
"status": "affected"
},
{
"version": "0.6.46",
"status": "affected"
},
{
"version": "0.6.47",
"status": "affected"
},
{
"version": "0.6.48",
"status": "affected"
},
{
"version": "0.6.49",
"status": "affected"
},
{
"version": "0.6.50",
"status": "affected"
},
{
"version": "0.6.51",
"status": "affected"
},
{
"version": "0.6.52",
"status": "affected"
},
{
"version": "0.6.53",
"status": "affected"
},
{
"version": "0.6.54",
"status": "affected"
},
{
"version": "0.6.55",
"status": "affected"
},
{
"version": "0.6.56",
"status": "affected"
},
{
"version": "0.6.57",
"status": "affected"
},
{
"version": "0.6.58",
"status": "affected"
},
{
"version": "0.6.59",
"status": "affected"
},
{
"version": "0.6.60",
"status": "affected"
},
{
"version": "0.6.61",
"status": "affected"
},
{
"version": "0.6.62",
"status": "affected"
},
{
"version": "0.6.63",
"status": "affected"
},
{
"version": "0.6.64",
"status": "affected"
},
{
"version": "0.6.65",
"status": "affected"
},
{
"version": "0.6.66",
"status": "affected"
},
{
"version": "0.6.67",
"status": "affected"
},
{
"version": "0.6.68",
"status": "affected"
},
{
"version": "0.6.69",
"status": "affected"
},
{
"version": "0.6.70",
"status": "affected"
},
{
"version": "0.6.71",
"status": "affected"
},
{
"version": "0.6.72",
"status": "affected"
},
{
"version": "0.6.73",
"status": "affected"
},
{
"version": "0.6.74",
"status": "affected"
},
{
"version": "0.6.75",
"status": "affected"
},
{
"version": "0.6.76",
"status": "affected"
},
{
"version": "0.6.77",
"status": "affected"
},
{
"version": "0.6.78",
"status": "affected"
},
{
"version": "0.6.79",
"status": "affected"
},
{
"version": "0.6.80",
"status": "affected"
},
{
"version": "0.6.81",
"status": "affected"
},
{
"version": "0.6.82",
"status": "affected"
},
{
"version": "0.6.83",
"status": "affected"
},
{
"version": "0.6.84",
"status": "affected"
},
{
"version": "0.6.85",
"status": "affected"
},
{
"version": "0.6.86",
"status": "affected"
},
{
"version": "0.6.87",
"status": "affected"
},
{
"version": "0.6.88",
"status": "affected"
},
{
"version": "0.6.89",
"status": "affected"
},
{
"version": "0.6.90",
"status": "affected"
},
{
"version": "0.6.91",
"status": "affected"
},
{
"version": "0.6.92",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.9,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"baseScore": 2.6,
"accessVector": "NETWORK",
"accessComplexity": "HIGH",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 4.9,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-06-29T13:43:36.108785Z",
"id": "CVE-2026-13510",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-327"
},
{
"lang": "en",
"value": "CWE-328"
}
]
}
],
"references": [
{
"url": "https://github.com/simstudioai/sim/",
"source": "[email protected]"
},
{
"url": "https://github.com/simstudioai/sim/issues/4759",
"source": "[email protected]"
},
{
"url": "https://github.com/simstudioai/sim/pull/4760",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-13510",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/838842",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/374518",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/374518/cti",
"source": "[email protected]"
}
]
}