Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1 on Android. Impacted is an unknown function of the file com/WahooFitness/SYSTM/BuildConfig.java of the component com.WahooFitness.SYSTM. Such manipulation of the argument SEGMENT_WRITE_KEY leads to use of hard-coded cryptographic key . Local access is required to approach this attack. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-5462 A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1 on Android. Impacted is an unknown function of the file com/WahooFitness/SYSTM/BuildConfig.java of… https://www.cve.org/CVERecord?id=CVE-2026-5462
Post summary
A vulnerability was identified in Wahoo Fitness SYSTM App (up to version 7.2.1) on Android that involves an unknown function in the BuildConfig.java file.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5462 - Wahoo Fitness SYSTM App com.WahooFitness.SYSTM http://BuildConfig.java hard-coded key Intel Report: https://ift.tt/19VwZB5
Post summary
A threat alert identifies CVE-2026-5462 in the Wahoo Fitness SYSTM app, noting a hard‑coded key in BuildConfig.java, but provides no PoC, exploit, patch, or detailed technical data.