PT-2026-52637 · Shenzhen I365 Tech Co. · Setracker2 Parental Control App (Android) Package Com.Tgelec.Setracker

Huancheng Hu · Published 2026-06-25 · Updated 2026-06-26 · CVE-2026-9222

NVD

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.

Fix

Weakness Enumeration

CWE-836

Related Identifiers

CVE-2026-9222

Affected Products

Setracker2 Parental Control App (Android) Package Com.Tgelec.Setracker

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-9222 · Security Note
• https://raw.githubusercontent.com/cisagov/CSAF/refs/heads/develop/csaf_files/VA/white/2026/va-26-176-01.json · Note