CVE-2026-86443

— UNSCORED

Published 2026-09-16 · Updated 2026-09-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.

Weaknesses

CWE-312

References

https://fermax.com/security-advisories
https://nvd.nist.gov/vuln/detail/CVE-2025-2909

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.