Skip to content
Threat Feed
Subscribe

Product

Attendo Admin Android Application (<= 3.0.13)

1 brief RSS
high advisory

Attendo Admin Android Application: Hard-coded MQTT Broker Credentials (CVE-2026-119736)

The Attendo Admin Android application version 3.0.13 and earlier contains hard-coded MQTT credentials in bundled configuration files, allowing unauthorized access to production data and potential message injection.

Attendo Admin Android application mobile-security android vulnerability mqtt information-disclosure
2t 1c