CVE-2026-5457

A security flaw has been discovered in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android. This affects an unknown function of the file com/allproperty/android/agentnet/BuildConfig.java of the component com.allproperty.android.agentnet. The manipulation of the argument SEGMENT_ANDROID_WRITE_KEY/SEGMENT_TOS_WRITE_KEY results in use of hard-coded cryptographic key . The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-320
• CWE-321

• https://vuldb.com/submit/781764
• https://vuldb.com/vuln/355045
• https://vuldb.com/vuln/355045/cti
• https://www.notion.so/Segment-Write-Key-Exposure-Leading-to-Data-Injection-and-User-Profile-Manipulation-In-com-allpropert-3262de3f97fb80b5aa5ae52475bf155e?source=copy_link

Published

Apr 3, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54557mise manages dev tools like node, python, cmake, and terrafo…5.5
• CVE-2026-5456A vulnerability was identified in Align Technology My Invisa…3.3
• CVE-2026-54560Cloudreve is a self-hosted file management and sharing syste…7.6
• CVE-2026-54562Cloudreve is a self-hosted file management and sharing syste…6.5
• CVE-2026-54563Cloudreve is a self-hosted file management and sharing syste…7.1
• CVE-2026-54568Microsoft UFO open-source framework for intelligent automati…4.3
• CVE-2026-54572Rclone is a command-line program to sync files and directori…8.8
• CVE-2026-54573Outline is a service that allows for collaborative documenta…5.3
• CVE-2026-54574proot-distro is a utility for managing proot containers. Pri…8.2
• CVE-2026-5458A weakness has been identified in Noelse Individuals & Pro A…3.3
• CVE-2026-54588Poweradmin is a web-based DNS administration tool for PowerD…9.6
• CVE-2026-5459The User Frontend: AI Powered Frontend Posting, User Directo…5.3