CVE-2026-11347: Linqi GmbH Linqi

High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days.

The linqi application contains hardcoded cryptographic keys. Additionally, the application uses a weak algorithm with a limited ASCII charset to dynamically generate Initialization Vectors (IVs) for AES/CBC encryption, making known-plaintext attacks feasible. An attacker with local access can leverage these vulnerabilities to decrypt sensitive obfuscated strings, including ConnectionString values containing database credentials from appsettings.json.

Affected products

• Linqi GmbH Linqi: up to and including 1.4.8.5

Published 2026-06-05. Last modified 2026-06-17.