← Back to the live CVE advisory feed

CVE-2026-85153: Schmooze dating mobile Application

Severity

9.3 (CRITICAL)

Vendor

SCHMOOZE

Affected versions

Android versions 5.2.7 (build 452) and prior; iOS versions 5.2.1 and prior

Patch status

Unknown

Published

2026-10-06T08:16:37.227

Modified

2026-10-06T08:16:37.227

Why it matters

This matters because the affected product may allow code execution. Prioritize systems that are internet-facing or have privileged access to other infrastructure.

Recommended admin actions

• Prioritize validation immediately due to critical CVSS severity.
• Treat internet-facing systems as higher priority.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exploit this vulnerability by decompiling the distributed application package and extracting the embedded credentials and cryptographic keys. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to backend and cloud resources and forge client requests on the targeted system.

View the official NVD record for CVE-2026-85153

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.