CVE-2026-112164

UNKNOWN 0.0

Hardcoded AES Key Enables Credential Disclosure

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext.

CWE	CWE-321 CWE-522
Vendor	laservideo
Product	lasergest
Published	Nov 9, 2026
Last Updated	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for laservideo lasergest

Be the first to know when new unknown vulnerabilities affecting laservideo lasergest are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

laservideo / lasergest

1.0.18

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112164.md

Credits

Liviero Marco CSIRT-IT