CVE-2026-96587— Use of Hard-coded Credentials in Viidure Dashcam Android Application
Quick assessment
Affected
Viidure Dashcam Android Application
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmw
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-96587
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Use of Hard-coded Credentials in Viidure Dashcam Android Application
Source: CVE Program / CVE List V5
Vulnerability Description
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Viidure | Dashcam Android Application | 0 ~ 3.3.1.260403 | - |
|
II. Public POCs for CVE-2026-96587
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-96587
请登录查看更多情报信息。
Other References for CVE-2026-96587 (3)
IV. Related Vulnerabilities
Same weakness: CWE-798
-
CVE-2026-100294
Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5 -
CVE-2026-7193
Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Route -
CVE-2026-101052
refly-ai refly JWT Token app.config.ts hard-coded credential -
CVE-2026-79959
Botslab G980H Dashcams Use of Hard-coded Credentials -
CVE-2026-93290
Use of Hard-coded Credentials in Eufy Omni C20
V. Comments for CVE-2026-96587
No comments yet