CVE-2026-4216

A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor explains: "The function referenced in the report currently exists in our deployed system. It is related to a developer mode used during the configuration process for Bluetooth pairing between the blood glucose meter and the SmartLog application. This function is intended for configuration purposes related to device integration and testing. (...) [I]n a future application update, we plan to review measures to either remove the developer mode function or restrict access to it."

• CWE-259
• CWE-798

• https://vuldb.com/?ctiid.351140
• https://vuldb.com/?id.351140
• https://vuldb.com/?submit.770497
• https://www.notion.so/Developer-Mode-Credential-Exposure-in-air-SmartLog-android-3182de3f97fb80f1abb7e958be2940fa?source=copy_link

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42154Prometheus is an open-source monitoring system and time seri…7.5
• CVE-2026-42155Magento Long Term Support (LTS) is an unofficial, community-…9.3
• CVE-2026-42156Flowsint is an open-source OSINT graph exploration tool desi…7.1
• CVE-2026-42157Flowsint is an open-source OSINT graph exploration tool desi…5.1
• CVE-2026-42158Flowsint is an open-source OSINT graph exploration tool desi…2.3
• CVE-2026-42159Flowsint is an open-source OSINT graph exploration tool desi…5.4
• CVE-2026-42160Data Space Portal is an open-source Software as a Service (S…10
• CVE-2026-42167mod_sql in ProFTPD before 1.3.9a allows remote attackers to …8.1
• CVE-2026-42168django-pyas2 through 1.2.3 is vulnerable to OS command injec…9.1
• CVE-2026-42169A heap-buffer-overflow vulnerability exists in the APNG (Ani…7.3
• CVE-2026-4217A security vulnerability has been detected in XREAL Nebula A…2.5
• CVE-2026-42170A heap-based buffer overflow vulnerability exists in the GIM…7.8