Vulnerabilities CVE-2026-9220

CVE-2026-9220

High

Open

TLP:CLEAR

Setracker2 Children's Smartwatch Ecosystem Use of hard-coded cryptographic key

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allows an attacker to decrypt Setracker2 watch traffic.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.23%

14.2th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jun 25, 2026
Last Modified: Aug 3, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.