CVE-2026-5453CWE-321

Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key

Medium · published April 3, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2026-04-03T04:30Z
EPSS history
Timeline
  • 03 APR 04:30Z
    Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key
    cvelistv5