CVE-2026-16581
Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jul 28, 2026
- Updated
- Jul 29, 2026
- Reserved
- Jul 22, 2026
Description
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | icscert |
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | icscert |
Weaknesses
- CWE-540 Inclusion of sensitive information in source code
Affected Products
| Product | Versions |
|---|---|
Smart Lock Mobile Applicationigloohome |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.