CVE-2026-5453 in só vantagem pra investir App

Sumário (Inglês)

A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key
. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Divulgação

03/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
355041	Rico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java Encriptação fraca	321	Prova de conceito	Não definido	CVE-2026-5453

Fontes

• MITRE
• NVD
• CVE Details