CVE-2026-86443
Cleartext Storage of Sensitive Information Vulnerability
- State
- Published
- Severity
- 6.9 Medium
- Published
- Sep 16, 2026
- Updated
- Sep 16, 2026
- Reserved
- Sep 7, 2026
Description
Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N | FERMAX |
Weaknesses
- CWE-312 Cleartext Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
DuoxMeFermax Electronica S.A.U. |
|
References
- Fermax security advisoriesvendor-advisory
- CVE-2025-2909 - iOS variant of the same weakness classrelated
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.