Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by …

Info

CVECVE-2026-86443

First seen2026-09-16 12:16 UTC

Disclosed2026-09-16 10:16 UTC

Last updated2026-09-16 12:16 UTC

Channel statusauto

Summary

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://fermax.com/security-advisories
https://nvd.nist.gov/vuln/detail/CVE-2025-2909

Timeline

2026-09-16 nvd_ingest NVD