CVE-2026-5454
A vulnerability was found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Performing a manipulation of the argument SegmentWriteKey results in use of hard-coded cryptographic key . The attack is only possible with local access. The exploit has been made public and could be used.
- Score
- CVSS 4.0 4.8 Medium
- Status
- Deferred - cna@vuldb.com
- Published
- 2026-04-03
- Last modified
- 2026-04-03
- Weaknesses
- CWE-320, CWE-321
Affected products
References
- https://vuldb.com/submit/781759
- https://vuldb.com/vuln/355042
- https://vuldb.com/vuln/355042/cti
- https://www.notion.so/Segment-Write-Key-Exposure-Leading-to-Data-Injection-and-User-Profile-Manipulation-In-co-gridapp-…
