CVE-2026-16581
Medium · 5.3CVSS
5.3
EPSS
0.4%
Published
Jul 28, 2026
CISA due date
—
The record
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-78192 WebDyne versions from 2.022 before 3.022 for Perl disclose application source to… CWE-540
- CVE-2026-84390 A inclusion of sensitive information in source code vulnerability in Fortinet… CWE-540
- CVE-2026-45728 Algernon is a small self-contained pure-Go web server. CWE-540
- CVE-2026-4155 ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information… CWE-540
- CVE-2026-35383 Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some… CWE-540
- CVE-2026-22275 Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to… CWE-540