[ CVE-2026-107171 · Published 14 Oct 2026 ]
Vulnerability in Trellix Agent
CVSS 6.9
EPSS <1%No fix listed yet
[ Description ]Official description
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.