Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Risk score

42.4

Published

2026-07-28

Status

Deferred

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.

Weaknesses

CWE-540

Coverage 1

vulnerability

igloohome Smart Lock Mobile Application

A vulnerability in the igloohome Smart Lock Mobile Application (Android 3.2.3) allows an unauthorized actor to access backend services. This could enable access to sensitive functionality and potentially compromise the s…

CISA Advisories · Jul 28, 2026 Medium

CVE-2026-16581vulnerabilitycwe-540smart lock

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-209-06