Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/mobile/di/SegmentSettingsModule.java of the component br.com.rico.mobile. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-5453 A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android. This issue affects some unknown processing of the file br/com/rico/m… https://www.cve.org/CVERecord?id=CVE-2026-5453
Post summary
A CVE has been acknowledged for the Rico app, but the post lacks technical details, PoC, exploitation evidence, or mitigation guidance.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5453 - Rico só vantagem pra investir App http://br.com.rico.mobile http://SegmentSettingsModule.java hard-coded key Intel Report: https://ift.tt/9BToHM4
Post summary
The tweet alerts to CVE‑2026‑5453 affecting the Rico app, noting a hard‑coded key in SegmentSettingsModule.java, but provides no PoC, exploit, patch, or evidence of active exploitation.