PT-2026-23869 · Ethosmobile+1 · Androidethereum+1

Vuldb · Published 2026-03-07 · Updated 2026-03-07 · CVE-2026-3668

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Freedom Factory dGEN1 versions up to 20260221

Description An issue exists in the AndroidEthereum function of the org.ethosmobile.webpwaemul component that results in improper access controls. Remote exploitation is possible, but is considered difficult due to the high complexity of the attack. The exploit has been publicly released. The vendor was contacted regarding this issue but did not respond.

Recommendations Versions prior to 20260221 should be updated. As a temporary workaround, consider restricting access to the AndroidEthereum function until a patch is available.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-3668

Affected Products

Androidethereum

Dgen1

References · 8

• 🔥 https://gist.github.com/Lytes/5fc292cecdc561f5c010c1f3a8a7bf1d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3668 · Security Note
• https://vuldb.com/?submit.764702 · Note
• https://vuldb.com/?id.349556 · Note
• https://vuldb.com/?ctiid.349556 · Note
• https://t.me/CVEtracker/46737 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2030329593140265247 · Twitter Post
• https://twitter.com/CVEnew/status/2030339291180839225 · Twitter Post