CVE-2026-5452
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability was found in UCC CampusConnect App up to 14.3.5 on Android in the file campusconnect/BuildConfig.java. Manipulation leads to use of a hard-coded cryptographic key. The attack requires local execution.
Risk Assessment
A hard-coded cryptographic key could allow an attacker with local access to decrypt sensitive data or compromise application security.
Recommendation
Update the UCC CampusConnect App to the latest version that fixes this vulnerability. Restrict local access to the device.
Original NVD description (English source)
A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android. This vulnerability affects unknown code of the file campusconnect/BuildConfig.java of the component campusconnect.ucc. This manipulation causes use of hard-coded cryptographic key . The attack can only be executed locally. The exploit has been published and may be used.