CVE-2026-110104 Details

A vulnerability exists in Xxyopen Novel versions through 3.5.0, where the application stores unsalted MD5 password hashes in the user_info.password field. This weak hashing method allows attackers to recover plaintext passwords, especially if they gain access to the database or a backup containing these hashes. The vulnerability arises because the UserServiceImpl.register() method does not apply proper salting to the MD5 hashes before storage. Attackers can exploit this flaw by using precomputed tables or GPU-based brute force methods to crack the hashes and reuse the obtained credentials.

Users can update to the latest version of Xxyopen Novel, where this vulnerability has been addressed by changing the password hashing method to use BCrypt, a more secure algorithm that includes built-in salting.