CVE-2026-5453
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability was found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android in the file br/com/rico/mobile/di/SegmentSettingsModule.java. Manipulation of the SEGMENT_WRITE_KEY argument leads to use of a hard-coded cryptographic key. The attack requires local environment.
Risk Assessment
A hard-coded cryptographic key could allow an attacker with local access to compromise data confidentiality or application integrity.
Recommendation
Update the Rico só vantagem pra investir App to a version that fixes this vulnerability. Restrict local access to the device.
Original NVD description (English source)
A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.