CVE-2026-86443

Vulnerability Description

Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account.

Related Weaknesses (CWE)

CWE-312

References

https://fermax.com/security-advisories
https://nvd.nist.gov/vuln/detail/CVE-2025-2909

FAQ

What is CVE-2026-86443?

CVE-2026-86443 is a documented vulnerability. Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by t...

How severe is CVE-2026-86443?

CVSS scoring is not yet available for CVE-2026-86443. Check NVD for updates.

Is there a patch for CVE-2026-86443?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.