What’s Vulnerable › Vulnerabilities

CVE-2026-16581: Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-28 · updated 2026-10-23
• Weakness: CWE-540

Description

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.

Affected products

• igloohome Smart Lock Mobile Application: Version 3.2.3

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06

Get alerted when CVE-2026-16581 or the next vulnerability affects your stack