VULNERABILITY INTELLIGENCE

CVE-2026-16581

CVSS score5.3 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-07-28
Last modified2026-10-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-540

Primary references