PT-2026-29992
CVE-2026-5457
·
Published
2026-04-03
·
Updated
2026-04-03
Description by
CVSS 3.1
3.3
LowMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PropertyGuru AgentNet Singapore App versions through 23.7.10
Description
A security flaw exists in PropertyGuru AgentNet Singapore App on Android up to version 23.7.10. The issue involves the manipulation of the arguments
SEGMENT ANDROID WRITE KEY and SEGMENT TOS WRITE KEY within an unknown function of the file com/allproperty/android/agentnet/BuildConfig.java of the component com.allproperty.android.agentnet, leading to the use of a hard-coded cryptographic key. The attack requires local access. The exploit has been publicly released.Recommendations
Update PropertyGuru AgentNet Singapore App to a version later than 23.7.10.
Found an issue in the description? Have something to add? Feel free to write us 👾