CVE-2026-16581

Medium5.3Published on July 28, 2026

In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.

CVSS score5.3 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness type (CWE)CWE-540

Vulnerabilities

igloohome Smart Lock: Vulnerability in Android App Could Expose Locks to Intrusions

A flaw in the igloohome Android app (CVE-2026-16581) exposes sensitive credentials and could allow attackers to unlock smart locks globally.

Jul 31, 202605:102 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

igloohome Smart Lock: Vulnerability in Android App Could Expose Locks to Intrusions