CVE-2026-86443

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account...

CVE-2026-85628

CVE-2026-85628 affects the DuoxMe application and VEO / VEO-XS Wi-Fi monitors (Fermax). During the pairing process, home Wi-Fi credentials are transmitted in cleartext over Wi-Fi Direct , allowing an attacker on the same Wi-Fi Direct network to intercept the network password. The vulnerability ex...

EUVD-2026-80585

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-86443 Cleartext Storage of Sensitive Information Vulnerability

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account...

CVE-2026-86443

DuoxMe for Android, in versions prior to 4.3.4 , stores sensitive credentials in cleartext , allowing an attacker with local access to the device to retrieve them and impersonate the user account . The CNA-assigned CVSS 4.0 score is 6.9 (MEDIUM) (AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/SC:H/VI:N/SI:H/VA:N/...

EUVD-2026-80326

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account...

EUVD-2025-8619

Malicious code in bioql PyPI...

CVE-2025-2909

The lack of encryption in the DuoxMe formerly Blue application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information...

CVE-2025-2909

The lack of encryption in the DuoxMe formerly Blue application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information...

CVE-2025-2909 Lack of encryption vulnerability in DuoxMe

The lack of encryption in the DuoxMe formerly Blue application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information...

CVE-2025-2909 Lack of encryption vulnerability in DuoxMe

The lack of encryption in the DuoxMe formerly Blue application binary in versions prior to 3.3.1 for iOS devices allows an attacker to gain unauthorised access to the application code and discover sensitive information...

CVE-2025-2909

CVE-2025-2909 affects DuoxMe (iOS) prior to version 3.3.1. The root cause is lack of encryption in the application binary, allowing an attacker to gain unauthorised access to the app code and discover sensitive information. Public details in connected documents explicitly describe the vulnerabili...

Fermax DuoxMe 安全漏洞

Fermax DuoxMe is software for a video access control system from Fermax. A security vulnerability exists in Fermax DuoxMe versions prior to 3.3.1 that stems from a lack of encryption and could lead to unauthorized access to application code and sensitive information...