Vulnerabilities CVE-2026-9219

CVE-2026-9219

High

Open

TLP:CLEAR

Setracker2 Children's Smartwatch Ecosystem Generation of Predictable Numbers or Identifiers

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a predictable registration ID derived from IMEI. The enrollment system lacks additional authentication before assignment. If an attacker is able to obtain the registration ID, they would be able to arbitrarily enroll watches belonging to other users.

Details

CVSS Score: 8.3
EPSS Score ⓘ: 0.20%

10.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jun 25, 2026
Last Modified: Aug 3, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.