CVE-2026-5457
Low · 3.3CVSS
3.3
EPSS
0.1%
Published
Apr 3, 2026
CISA due date
—
The record
A security flaw has been discovered in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android. This affects an unknown function of the file com/allproperty/android/agentnet/BuildConfig.java of the component com.allproperty.android.agentnet. The manipulation of the argument SEGMENT_ANDROID_WRITE_KEY/SEGMENT_TOS_WRITE_KEY results in use of hard-coded cryptographic key . The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-11505 A flaw has been found in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000… CWE-320
- CVE-2026-8739 A vulnerability was detected in Sanluan PublicCMS 5.202506.d. CWE-320
- CVE-2026-8243 A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. CWE-320
- CVE-2026-7306 A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. CWE-320
- CVE-2026-7018 A vulnerability was determined in Datavane Datavines up to… CWE-320
- CVE-2026-6611 A vulnerability was found in liangliangyy DjangoBlog up to 2.1.0.0. CWE-320
- CVE-2026-6580 A security vulnerability has been detected in liangliangyy DjangoBlog up to 2.1.0.0. CWE-320
- CVE-2026-5622 A vulnerability was determined in hcengineering Huly Platform 0.7.382. CWE-320