PT-2026-29986 · Unknown · Só Vantagem Pra Investir App

Fxizenta · Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-5453

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rico só vantagem pra investir App versions up to 4.58.32.12421

Description A security issue exists in Rico só vantagem pra investir App on Android, affecting the processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java within the br.com.rico.mobile component. Manipulation of the SEGMENT WRITE KEY argument results in the use of a hard-coded cryptographic key. The attack can only be performed locally and the exploit has been publicly disclosed. The vendor was contacted but did not respond.

Recommendations Update Rico só vantagem pra investir App to a version newer than 4.58.32.12421.

Exploit

Fix

Weakness Enumeration

CWE-321

CWE-320

Related Identifiers

CVE-2026-5453

Affected Products

Só Vantagem Pra Investir App

References · 6

• 🔥 https://notion.so/Segment-Write-Key-Exposure-Leading-to-Data-Injection-and-User-Profile-Manipulation-In-br-com-rico-mo-3262de3f97fb800a9bfef6e6fd7d7179?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5453 · Security Note
• https://twitter.com/CVEnew/status/2040128727036654023 · Twitter Post
• https://vuldb.com/vuln/355041 · Note
• https://vuldb.com/submit/781758 · Note
• https://vuldb.com/vuln/355041/cti · Note