CVE-2026-9219

Name of the Vulnerable Software and Affected Versions Setracker2 Android Companion App com.tgelec.setracker versions prior to 3.1.6

Description The application uses a predictable registration ID derived from the International Mobile Equipment Identity (IMEI), which is a unique identifier for mobile devices. The enrollment system does not require additional authentication before assignment. An attacker who obtains the registration ID can arbitrarily enroll watches belonging to other users.

Recommendations Update Setracker2 Android Companion App com.tgelec.setracker to version 3.1.6 or later.