CVE-2025-63289

9.1 criticalEPSS 0.2%

Critical (9.1) in sogexia sogexia. EPSS 0.2% chance of exploitation in the next 30 days.

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE: CWE-321
Published: 2025-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sogexia:sogexia

References

https://medium.com/@sudosu01/information-disclosure-hardcoded-encryption-keys-fc375abf68a3
https://www.linkedin.com/in/umanhonlengabriel

Check your stack JSON