Skip to content
OpenAdvisories
Critical ICSA-26-272-07 2 CVEs

Viidure Dashcam Android Application

Published Sep 29, 2026 · Updated Sep 29, 2026

Vendor: Viidure Product: Dashcam Android Application

Summary

Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform.

Vulnerabilities 2

  • Critical 10.0
    CVE-2026-96587

    Use of Hard-coded Credentials in Viidure Dashcam Android Application

    The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storage, including the ability to read, modify, or delete operational files such as firm…

    Viidure Dashcam Android Application Android
  • High 7.5
    CVE-2026-94204

    Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application

    The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live da…

    Viidure Dashcam Android Application Android

Revision history

  1. #1

    Initial Publication

References