Plaintext Credentials Vulnerability in Viidure Android Application

CVE-2026-96587

What is CVE-2026-96587?

The Viidure Android application contains a significant security flaw where hardcoded cloud storage credentials are embedded in its compiled code. This exposure allows unauthorized users to gain complete access to critical storage resources, enabling them to read, alter, or remove vital operational files, such as firmware and application binaries. The presence of these plaintext credentials within the app poses a substantial risk to the integrity and security of the platform, necessitating immediate attention from users and developers.

References