CVE-2026-119736

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-119736 Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-119736

The Attendo (formerly Petpooja Payroll) Admin Android application, version 3.0.13 and earlier , is vulnerable to a hard-coded credentials vulnerability. Attackers can extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets, specifically production....

EUVD-2026-115368

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...

CVE-2026-119736: Petpooja Munshi: Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded…

Attendo formerly Petpooja Payroll Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability that allows attackers to extract production MQTT broker credentials by decompiling the APK's bundled Flutter configuration assets such as production.json and...