CVE-2026-50641 identifies a security vulnerability in Streamsoft Business Intelligence where user passwords are stored in plaintext in the database. This practice exposes sensitive credentials to potential unauthorized access if the database is compromised. The vulnerability affects all versions before 6.8.0.0. The vendor fixed this issue in version 6.8.0.0 and mandated password changes on first login post-update to mitigate risks from previously exposed plaintext passwords.

The plaintext storage of passwords significantly increases the risk of credential compromise if an attacker gains access to the database. This can lead to unauthorized access to user accounts and potentially sensitive business intelligence data. The CVSS 4.0 score of 7.1 reflects a high severity due to the ease of exploitation (low attack complexity, no privileges or user interaction required) and the high impact on confidentiality.

Users should upgrade to Streamsoft Business Intelligence version 6.8.0.0 or later, where the plaintext password storage issue has been fixed. Additionally, users are advised to change their passwords upon first login after the update to invalidate any potentially compromised credentials. No other mitigation steps are indicated by the vendor.