CVE-2025-10681:
Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storage containers.
Score
A numerical rating that indicates how dangerous this vulnerability is.
8.6HighA numerical rating that indicates how dangerous this vulnerability is.
- Published Date:Apr 3, 2026
- CISA KEV Date:*No Data*
- Industries Affected:20
Exploitability
- Score:3.9
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:4.7
- Confidentiality Impact:HIGH
- Integrity Impact:LOW
- Availability Impact:LOW
Description Preview
Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storage containers.
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
Low
