Information Disclosure Vulnerability in Schmooze dating mobile Application
This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials and cryptographic keys. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to backend and cloud resources and forge client requests on the targeted system.
CVE-2026-85153
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-85153
Schmooze dating mobile Application
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Schmooze",
"product": "Schmooze dating mobile Application",
"versions": [
{
"status": "affected",
"version": "Android versions 5.2.7 (build 452) and prior"
},
{
"status": "affected",
"version": "iOS versions 5.2.1 and prior"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-85153
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #9211 · Revision 1
- Added to Heist Feed
- Publisher date