Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-9222 Authentication Bypass in Setracker2 Android App via Password Hash Exposure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9222
Post summary
The post announces an authentication bypass vulnerability (CVE‑2026‑9222) in the Setracker2 Android app caused by exposed password hashes, with no PoC, exploit code, or patch referenced.
🚨*CVE* CVE-2026-9222 Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client.… https://www.cve.org/CVERecord?id=CVE-2026-9222 ----- Traducción: CVE-2026-9222 Set… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑9222 with a short technical note and a link, but provides no PoC, exploit code, or mitigation information.
CVE-2026-9222 Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client.… https://www.cve.org/CVERecord?id=CVE-2026-9222
Post summary
The post discloses CVE-2026-9222 for the Setracker2 Android Companion App, noting that older versions need only a password hash for backend authentication, but provides no PoC, exploit, patch, or active exploitation details.