CVE-2026-96587
Last modified
CVE-2026-96587 is a critical-severity vulnerability rated 10/10 on the CVSS scale. The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries..
Description
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Viidure | Dashcam Android Application | <= 3.3.1.260403 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-96587?
How severe is CVE-2026-96587?
How do I fix CVE-2026-96587?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-96577A flaw was found in oc-mirror. During mirroring operations, …7.1
- CVE-2026-96578The GSpeech TTS – WordPress Text To Speech Plugin plugin for…7.2
- CVE-2026-9658Plack::Middleware::Security::Common versions before 0.13.1 f…7.3
- CVE-2026-96580Gitea expanded a workflow's static `strategy.matrix` into it…7.5
- CVE-2026-96581Authorization Bypass Through User-Controlled Key vulnerabili…7.6
- CVE-2026-96582A HID report descriptor is a sequence of items, each declari…4.9
- CVE-2026-96589When a private repository is transferred to a user who lacks…4.3
- CVE-2026-9659Multiple exploitable stack-based buffer overflow vulnerabili…9.1
- CVE-2026-96594The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/med…6.1
- CVE-2026-96596Loop with Unreachable Exit Condition ('Infinite Loop') vulne…5.9
- CVE-2026-96599Isotope eCommerce through 2.9.10 derives order identifiers f…5.9
- CVE-2026-9660Multiple exploitable stack-based buffer overflow vulnerabili…9.1
Are you affected by CVE-2026-96587?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST