The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firmware and application binaries.
Critical 10.0
CVE-2026-96587
Viidure Dashcam Android Application — hard-coded credentials.
The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code.
Published Source NVD
CVSS 3.1
10.0
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploit chance, 30 days
0.4%
Higher than 35% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory
What happened
What to do
- 01Check whether you run Viidure Dashcam Android Application, and which version.
- 02Follow the vendor advisory for a fix or a workaround.
References
Timeline · UTC
- Published to NVD
Also actively exploited