Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file
References
| Link | Resource |
|---|---|
| https://medium.com/@sudosu01/information-disclosure-hardcoded-encryption-keys-fc375abf68a3 | Third Party Advisory |
| https://www.linkedin.com/in/umanhonlengabriel | Not Applicable |
Configurations
History
05 Jan 2026, 19:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sogexia sogexia
Sogexia |
|
| References | () https://medium.com/@sudosu01/information-disclosure-hardcoded-encryption-keys-fc375abf68a3 - Third Party Advisory | |
| References | () https://www.linkedin.com/in/umanhonlengabriel - Not Applicable | |
| CPE | cpe:2.3:a:sogexia:sogexia:35:*:*:*:*:android:*:* |
13 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| CWE | CWE-321 |
12 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-12 16:15
Updated : 2026-01-05 19:23
NVD link : CVE-2025-63289
Mitre link : CVE-2025-63289
CVE.ORG link : CVE-2025-63289
JSON object : View
Products Affected
sogexia
- sogexia
CWE
CWE-321
Use of Hard-coded Cryptographic Key
