CVE-2026-2103Disclosure(infor / syteline_erp)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.

infor CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp

Weakness type (CWE)

CWE-321CWE-798

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

syteline_erp

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-02-06); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

infor

Products

syteline_erp

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-06	2	Disclosure2
2026-02-09	1	General1
2026-04-09	1	Disclosure1

Full discourse4 posts

/r/netsec@_r_netsec241d
General
CVE-2026-2103 - Infor Syteline ERP - Keys Included: No Assembly Required https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp
Post summary
The brief mention references CVE-2026-2103 for Infor Syteline ERP but offers no substantive technical or exploit information.
02070872
32.7K followersView on X
Black Lantern Security (BLSOPS)@BlackLanternLLC244d
Disclosure
🚨CVE-2026-2103: Infor Syteline ERP hard-codes encryption keys in binaries. One copy = universal decryption of ALL passwords, DB creds & API keys across every install. No patch. #CVE https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp
Post summary
The tweet announces CVE-2026-2103, noting that Infor Syteline ERP hard‑codes encryption keys that enable universal decryption of all credentials, and indicates that no patch is currently available.
01020155
649 followersView on X
/r/netsec@_r_netsec182d
Disclosure
CVE-2026-2103 - Infor Syteline ERP - Keys Included: No Assembly Required https://blog.blacklanternsecurity.com/p/cve-2026-2103-infor-syteline-erp
Post summary
The post announces CVE-2026-2103 for Infor Syteline ERP and links to a blog, but offers no specifics on exploitation, patches, or technical details.
01010432
33.3K followersView on X
CVE@CVEnew244d
Disclosure
CVE-2026-2103 Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The enc… https://www.cve.org/CVERecord?id=CVE-2026-2103
Post summary
The text announces CVE‑2026‑2103, detailing that Infor SyteLine ERP uses hard‑coded static cryptographic keys to encrypt credentials, without evidence of exploit code, active attacks, or patches.
00010188
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	infor	syteline_erp	10.0.8803.16889	-	-

Explore more

Back to dashboard infor CVEs syteline_erp vulnerabilities

What researchers are saying

CVE-2026-2103

/r/netsec@_r_netsecGeneral

The brief mention references CVE-2026-2103 for Infor Syteline ERP but offers no substantive technical or exploit information.

Black Lantern Security (BLSOPS)@BlackLanternLLCDisclosure

The tweet announces CVE-2026-2103, noting that Infor Syteline ERP hard‑codes encryption keys that enable universal decryption of all credentials, and indicates that no patch is currently available.

/r/netsec@_r_netsecDisclosure

The post announces CVE-2026-2103 for Infor Syteline ERP and links to a blog, but offers no specifics on exploitation, patches, or technical details.

CVE@CVEnewDisclosure

The text announces CVE‑2026‑2103, detailing that Infor SyteLine ERP uses hard‑coded static cryptographic keys to encrypt credentials, without evidence of exploit code, active attacks, or patches.