CVE-2026-5453
Last modified
CVE-2026-5453 is a low-severity vulnerability rated 3.3/10 on the CVSS scale. A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-5453?
How severe is CVE-2026-5453?
How do I fix CVE-2026-5453?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-54518jackson-databind contains the general-purpose data-binding f…6.5
- CVE-2026-5452A flaw has been found in UCC CampusConnect App up to 14.3.5 …3.3
- CVE-2026-54522MessagePack for Ruby is an implementation of the MessagePack…5.4
- CVE-2026-54526Argo Workflows is an open source container-native workflow e…9.9
- CVE-2026-54527JupyterLab Git is a Git extension for JupyterLab. From 0.30.…9
- CVE-2026-54528JupyterLab Git is a Git extension for JupyterLab. Prior to 0…7.1
- CVE-2026-54530pypdf is a free and open-source pure-python PDF library. Pri…5.5
- CVE-2026-54531pypdf is a free and open-source pure-python PDF library. Pri…5.5
- CVE-2026-54533vantage6 is an open-source infrastructure for privacy preser…6.9
- CVE-2026-54538xrdp is an open source RDP server. In versions 0.10.6 and pr…7.5
- CVE-2026-5454A vulnerability was found in GRID Organiser App up to 1.0.5 …3.3
- CVE-2026-54540Pheditor is a single-file editor and file manager written in…8.8
Are you affected by CVE-2026-5453?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST