CVE-2026-86443 — Cleartext Storage of Sensitive Information Vulnerability

CVE-2026-86443

Cleartext Storage of Sensitive Information Vulnerability PUBLISHED

Description (CNA)

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.

Affected (CNA)

Vendor / product	Versions
Fermax Electronica S.A.U. / DuoxMe	affected 0 before 4.3.4

CWE

CWE-312

References

https://fermax.com/security-advisories
https://nvd.nist.gov/vuln/detail/CVE-2025-2909

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.