Inclusion of Sensitive Information in Source Code in igloohome Smart Lock App
CVE-2026-16581

6.9MEDIUM

Key Information:

Vendor

Igloohome

Status
Smart Lock Mobile Application
Vendor
CVE Published:
28 July 2026

What is CVE-2026-16581?

The igloohome Smart Lock Mobile App versions 3.2.3 and earlier contain a vulnerability that allows unauthorized access to sensitive backend functions due to insufficient authentication safeguards. Attackers could exploit this weakness to retrieve critical data or control services that should remain protected, posing risks to user privacy and security.

Affected Version(s)

Smart Lock Mobile Application Version 3.2.3

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
government-resource

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vincent C. of CodeVispera reported this vulnerability to CISA.
.