Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for DuoxMe by Fermax Electronica S.A.U.

    CVE-2026-86443 (GCVE-0-2026-86443)

    Vulnerability from nvd – Published: 2026-09-16 09:12 – Updated: 2026-09-16 13:53
    VLAI
    Title
    Cleartext Storage of Sensitive Information Vulnerability
    Summary
    Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-16 13:50 UTC
    CWE
    • CWE-312 - Cleartext Storage of Sensitive Information
    References
    Impacted products
    Vendor Product Version
    Fermax Electronica S.A.U. DuoxMe Affected: 0 , < 4.3.4 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-86443",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-16T13:50:50.226469Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-16T13:53:24.680Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "com.fermax.blue.app",
              "platforms": [
                "Android"
              ],
              "product": "DuoxMe",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "4.3.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Pedro J. N\u00fa\u00f1ez-Cacho Fuentes (Tunelko)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "INCIBE-CERT"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.\u003c/p\u003e"
                }
              ],
              "value": "Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-37",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "HIGH",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-312",
                  "description": "CWE-312 Cleartext Storage of Sensitive Information",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-16T09:12:29.119Z",
            "orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
            "shortName": "FERMAX"
          },
          "references": [
            {
              "name": "Fermax security advisories",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://fermax.com/security-advisories"
            },
            {
              "name": "CVE-2025-2909 - iOS variant of the same weakness class",
              "tags": [
                "related"
              ],
              "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2909"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Cleartext Storage of Sensitive Information Vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
        "assignerShortName": "FERMAX",
        "cveId": "CVE-2026-86443",
        "datePublished": "2026-09-16T09:12:29.119Z",
        "dateReserved": "2026-09-07T12:41:14.377Z",
        "dateUpdated": "2026-09-16T13:53:24.680Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85628 (GCVE-0-2026-85628)

    Vulnerability from nvd – Published: 2026-09-16 09:36 – Updated: 2026-09-16 18:09
    VLAI
    Title
    Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
    Summary
    Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-16 18:08 UTC
    CWE
    • CWE-319 - Cleartext Transmission of Sensitive Information
    References
    URL Tags
    https://fermax.com/security-advisories vendor-advisory
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85628",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-16T18:08:28.842464Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-16T18:09:27.675Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "com.fermax.blue.app",
              "platforms": [
                "Android",
                "iOS"
              ],
              "product": "DuoxMe",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "4.3.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "VEO-WIFI",
                "VEO-XS-WIFI",
                "VEO-XS-WIFI-DDA",
                "VEO-XL-WIFI",
                "VEO-XL-WIFI-DDA"
              ],
              "product": "DUOX PLUS monitor firmware (VEO Wi-Fi range)",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "01.50.001",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Pedro J. N\u00fa\u00f1ez-Cacho Fuentes (Tunelko)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "INCIBE-CERT"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eTransmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.\u003c/p\u003e"
                }
              ],
              "value": "Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-117",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-117 Interception"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "ADJACENT",
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "LOW",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-319",
                  "description": "CWE-319 Cleartext Transmission of Sensitive Information",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-16T09:36:34.635Z",
            "orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
            "shortName": "FERMAX"
          },
          "references": [
            {
              "name": "Fermax security advisories",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://fermax.com/security-advisories"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
        "assignerShortName": "FERMAX",
        "cveId": "CVE-2026-85628",
        "datePublished": "2026-09-16T09:36:34.635Z",
        "dateReserved": "2026-09-04T11:26:54.653Z",
        "dateUpdated": "2026-09-16T18:09:27.675Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-85628 (GCVE-0-2026-85628)

    Vulnerability from cvelistv5 – Published: 2026-09-16 09:36 – Updated: 2026-09-16 18:09
    VLAI
    Title
    Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
    Summary
    Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-16 18:08 UTC
    CWE
    • CWE-319 - Cleartext Transmission of Sensitive Information
    References
    URL Tags
    https://fermax.com/security-advisories vendor-advisory
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-85628",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-16T18:08:28.842464Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-16T18:09:27.675Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "com.fermax.blue.app",
              "platforms": [
                "Android",
                "iOS"
              ],
              "product": "DuoxMe",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "4.3.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "platforms": [
                "VEO-WIFI",
                "VEO-XS-WIFI",
                "VEO-XS-WIFI-DDA",
                "VEO-XL-WIFI",
                "VEO-XL-WIFI-DDA"
              ],
              "product": "DUOX PLUS monitor firmware (VEO Wi-Fi range)",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "01.50.001",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Pedro J. N\u00fa\u00f1ez-Cacho Fuentes (Tunelko)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "INCIBE-CERT"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eTransmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.\u003c/p\u003e"
                }
              ],
              "value": "Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-117",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-117 Interception"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "ADJACENT",
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "LOW",
                "userInteraction": "PASSIVE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-319",
                  "description": "CWE-319 Cleartext Transmission of Sensitive Information",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-16T09:36:34.635Z",
            "orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
            "shortName": "FERMAX"
          },
          "references": [
            {
              "name": "Fermax security advisories",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://fermax.com/security-advisories"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
        "assignerShortName": "FERMAX",
        "cveId": "CVE-2026-85628",
        "datePublished": "2026-09-16T09:36:34.635Z",
        "dateReserved": "2026-09-04T11:26:54.653Z",
        "dateUpdated": "2026-09-16T18:09:27.675Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-86443 (GCVE-0-2026-86443)

    Vulnerability from cvelistv5 – Published: 2026-09-16 09:12 – Updated: 2026-09-16 13:53
    VLAI
    Title
    Cleartext Storage of Sensitive Information Vulnerability
    Summary
    Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-16 13:50 UTC
    CWE
    • CWE-312 - Cleartext Storage of Sensitive Information
    References
    Impacted products
    Vendor Product Version
    Fermax Electronica S.A.U. DuoxMe Affected: 0 , < 4.3.4 (semver)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-86443",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-16T13:50:50.226469Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-16T13:53:24.680Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "com.fermax.blue.app",
              "platforms": [
                "Android"
              ],
              "product": "DuoxMe",
              "vendor": "Fermax Electronica S.A.U.",
              "versions": [
                {
                  "lessThan": "4.3.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Pedro J. N\u00fa\u00f1ez-Cacho Fuentes (Tunelko)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "INCIBE-CERT"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eCleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.\u003c/p\u003e"
                }
              ],
              "value": "Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-37",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-37 Retrieve Embedded Sensitive Data"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "LOCAL",
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "HIGH",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "HIGH",
                "subIntegrityImpact": "HIGH",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-312",
                  "description": "CWE-312 Cleartext Storage of Sensitive Information",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-16T09:12:29.119Z",
            "orgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
            "shortName": "FERMAX"
          },
          "references": [
            {
              "name": "Fermax security advisories",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://fermax.com/security-advisories"
            },
            {
              "name": "CVE-2025-2909 - iOS variant of the same weakness class",
              "tags": [
                "related"
              ],
              "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2909"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Cleartext Storage of Sensitive Information Vulnerability",
          "x_generator": {
            "engine": "Vulnogram 1.0.5"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "539080bd-5750-4cce-b30b-eed9a4ef6dcc",
        "assignerShortName": "FERMAX",
        "cveId": "CVE-2026-86443",
        "datePublished": "2026-09-16T09:12:29.119Z",
        "dateReserved": "2026-09-07T12:41:14.377Z",
        "dateUpdated": "2026-09-16T13:53:24.680Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }