CISA Bulletin: igloohome Smart Lock Mobile App Information Disclosure (CVE-2026-16581)

Vulnerability Overview Vulnerability Name: igloohome Smart Lock Mobile Application Publication Date: July 28, 2026 Alert Code: ICSA-26-209-06 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems CVSS Score: 3.5.3 Vendor: igloohome Device: igloohome Smart Lock Mobile Application Vulnerability Description: Sensitive information found in source code Impact Scope Affected Versions: igloohome Smart Lock Mobile Application (Android) 3.2.3 (CVE-2026-16581) Critical Infrastructure Sector: Commercial Facilities Deployment Country/Region: Global Company Headquarters Location: Singapore Remediation Recommended Practices: - Minimize network exposure; ensure all control system devices and/or systems are not accessible via the internet. - Place control system networks and remote devices behind firewalls and isolate them from the business network. - When remote access is required, use more secure remote methods such as a Virtual Private Network (VPN), and ensure the VPN is updated to the latest version. - Conduct appropriate impact analysis and risk assessment before deploying countermeasures. - Implement recommended cybersecurity strategies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activities. - Do not click links or open attachments in unsolicited emails. - Refer to resources on avoiding email scams and social engineering attacks. Additional Information Acknowledgment: Vincent C. of CodeVispera reported this vulnerability to CISA. Revision History: Initial publication date is July 28, 2026. Tags Sector: Commercial Facilities Sector Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Links Related Alerts: - Siemens Mendix Runtime - Siemens SIMATIC S7-PLCSIM Advanced - ABB KNX Update Tool - Siemens Desigo CC Feedback Share Your Thoughts: We recently updated our anonymous product survey; feedback is welcome. Legal Notice and Terms of Use This product is subject to this notice and the Privacy and Use Policy. Contact Information CISA Central: 1-844-Say-CISA Email: contact@cisa.dhs.gov Social Media Facebook, X, LinkedIn, YouTube, Instagram, RSS Official Website CISA.gov U.S. Department of Homeland Security Website Other Links About CISA Budget and Performance DHS.gov FOIA Requests Whistleblower Protection Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback Back to Top Back to top link Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Careers About Footer CISA.gov U.S. Department of Homeland Security Website Ads None Navbar Topics Highlights Resources and Tools News and Events Care

Goal Reached Thanks to every supporter — we hit 100%!

CISA Bulletin: igloohome Smart Lock Mobile App Information Disclosure (CVE-2026-16581)