{"id":"CVE-2026-112164","published":"2026-11-09T17:17:09.583","lastModified":"2026-11-09T18:17:20.133","description":"The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-321","CWE-522"],"vendors":[],"products":[],"references":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112164.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112164.md","tags":[]}],"hasPoc":true,"ai":null}