CVE-2026-5455
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In Dialogue App up to version 4.3.2 on Android, in the res/raw/config.json file of the ca.diagram.dialogue component, manipulation of the SEGMENT_WRITE_KEY argument leads to use of a hard-coded cryptographic key. Local access required, exploit publicly available. Vendor did not respond.
Risk Assessment
The organization is at risk of local attacks exploiting a hard-coded key, potentially leading to unauthorized access to application data.
Recommendation
Contact the vendor for a patch or consider discontinuing use of the app until fixed.
Original NVD description (English source)
A vulnerability was determined in Dialogue App up to 4.3.2 on Android. The affected element is an unknown function of the file file res/raw/config.json of the component ca.diagram.dialogue. Executing a manipulation of the argument SEGMENT_WRITE_KEY can lead to use of hard-coded cryptographic key . The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.