CVE-2025-65826 Hardcoded credentials in n/a
Attackers can extract hardcoded Wi-Fi credentials from the mobile app to gain unauthorized network access or force device connections to malicious access points.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-65826?
CVE-2025-65826 is a critical vulnerability in n/a, published on 10 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located in close physical proximity to the device when it was first set up, they may be able to force the device to auto-connect to an attacker-controlled access point by setting the SSID and password to the same as which was found in the firmware file.
Weakness: CWE-312
Which versions are affected by CVE-2025-65826?
It affects 1 product.
Products include Meatmeet Meatmeet.
How do I fix CVE-2025-65826?
No fix has been published for CVE-2025-65826 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-65826 being exploited?
There is no known exploitation of CVE-2025-65826 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-9v6p-q56x-h64p.