CVE-2026-96587
CRITICAL
CVSS 10.0
Published: 2026-09-29
Modified: 2026-09-29
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.
Quick Facts
| CVE ID | CVE-2026-96587 |
| CVSS Score | 10.0 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2026-09-29 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |