CVE-2026-16581
Last modified
CVE-2026-16581 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| igloohome | Smart Lock Mobile Application | Version 3.2.3 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-16581?
How severe is CVE-2026-16581?
How do I fix CVE-2026-16581?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16553GitLab has remediated an issue in GitLab EE affecting all ve…5.4
- CVE-2026-16554cJSON library is vulnerable to an integer overflow in the pr…5.1
- CVE-2026-1656The Business Directory Plugin for WordPress is vulnerable to…5.3
- CVE-2026-16560A heap-buffer-overflow flaw was found in Directory Server (3…5.3
- CVE-2026-1657The EventPrime plugin for WordPress is vulnerable to unautho…5.3
- CVE-2026-1658User Interface (UI) Misrepresentation of Critical Informatio…5.3
- CVE-2026-16584Improper handling of an initialization failure in AWS API MC…7.3
- CVE-2026-16585The Better Messages – Chat Rooms, Group Chat, Private Messag…7.2
- CVE-2026-16587The Advanced Form Integration — Connect Forms to 200+ Apps p…4.3
- CVE-2026-1659GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
- CVE-2026-16597The GTM4WP – A Google Tag Manager (GTM) plugin for WordPress…7.2
- CVE-2026-1660GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
Are you affected by CVE-2026-16581?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST