CVE Watch30 jul 2026

CVE-2026-16581

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow

CVSS

5.3

Medio

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Publicado: 28 jul 2026 · Última mod.: 30 jul 2026 · CWE-540

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-292026-08-23

Descripción técnica

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.

Referencias oficiales

www.cisa.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-353836.5 MED

20.7%

——6Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. As of 2026-03-27, the token is no longer present in the web pages and cannot be used to enumerate or delete assets.31d