PT-2026-29885
CVE-2026-5420
·
Published
2026-04-02
·
Updated
2026-04-03
Description by
CVSS 3.1
2.5
LowMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Shinrays Games Goods Triple App versions up to 1.200
Description
A security flaw exists in Shinrays Games Goods Triple App up to version 1.200. The issue involves an unknown function within the jRwTX.java file of the cats.goods.sort.sorting.games component. Manipulation of the
AES IV/AES PASSWORD argument leads to the use of a hard-coded cryptographic key. Local access is required for exploitation, which is considered difficult. The exploit has been publicly released.Recommendations
Update to a version beyond 1.200.
Found an issue in the description? Have something to add? Feel free to write us 👾