Log in Start free

Vulnerability · Published Oct 6, 2026 · Assigned by CERT-In

CVE-2026-85153Information Disclosure Vulnerability in Schmooze dating mobile Application

Critical 9.3

In plain English

A critical-severity security flaw in Schmooze dating mobile Application from Schmooze. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)0.4%top 68.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials and cryptographic keys. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to backend and cloud resources and forge client requests on the targeted system.

Affected products (as reported)

VendorProductVersions
Schmooze Schmooze dating mobile Application Android versions 5.2.7 (build 452) and prioriOS versions 5.2.1 and prior

Weakness: CWE-321 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N

References