CVE-2025-65826

The mobile application was found to contain stored credentials for the network it was developed on

Critical · published December 10, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

🚨 Your Wi-Fi credentials are sitting in plain sight! A critical flaw in this mobile app allows attackers to extract stored credentials and potentially access your network! 🔥 Think of it like leaving your door unlocked while inviting the neighborhood to check out your new high-tech security system. If attackers can find out where you live and see your credentials, they can walk right in and take over your internet connection! An attacker could gain unauthorized access to your Wi-Fi network, leading to data breaches or malicious activities performed under your network's name. If they can force the device to connect to their rogue access point, they could intercept sensitive information flowing through your network. This level of access could be absolutely devastating!

Put simply

Think of it like leaving your door unlocked while inviting the neighborhood to check out your new high-tech security system. If attackers can find out where you live and see your credentials, they can walk right in and take over your internet connection! This vulnerability allows attackers to retrieve stored Wi-Fi credentials embedded within the mobile app. If the attacker is physically nearby during setup, they can manipulate the device to connect to a malicious access point with the same SSID and password.

What to do

An attacker could gain unauthorized access to your Wi-Fi network, leading to data breaches or malicious activities performed under your network's name. If they can force the device to connect to their rogue access point, they could intercept sensitive information flowing through your network. This level of access could be absolutely devastating! Developers should urgently patch the mobile application to remove stored credentials from the app's code. Implement secure storage practices and review the deployment process to ensure sensitive data isn't hardcoded. Update your application now to protect users! You've got this! Act fast, and you'll have those Wi-Fi credentials locked down in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.1th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    The mobile application was found to contain stored credentials for the network it was developed on
    cvelistv5