PT-2026-29976 · Unknown · Ucc Campusconnect App

Fxizenta · Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-5452

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions UCC CampusConnect App versions up to 14.3.5

Description A flaw exists in the UCC CampusConnect App for Android, specifically affecting the code within the campusconnect/BuildConfig.java file of the campusconnect.ucc component. This issue involves the use of a hard-coded cryptographic key. The attack is limited to local execution.

Recommendations Update UCC CampusConnect App to a version newer than 14.3.5.

Exploit

Fix

Weakness Enumeration

CWE-321

CWE-320

Related Identifiers

CVE-2026-5452

Affected Products

Ucc Campusconnect App

References · 7

• 🔥 https://notion.so/Uploadcare-Private-Key-Exposure-Leading-to-Unauthorized-File-Operations-and-Potential-RCE-in-campusc-3262de3f97fb8057bc67ec4320672d99?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5452 · Security Note
• https://vuldb.com/vuln/355040 · Note
• https://vuldb.com/submit/781757 · Note
• https://vuldb.com/vuln/355040/cti · Note
• https://twitter.com/CVEarity/status/2039982428358578609 · Twitter Post
• https://twitter.com/CVEnew/status/2040128737719533948 · Twitter Post