Which versions of Google are affected by EUVD-2026-12468?

CVE-2026-4251 is a low-severity vulnerability in CityData CityChat (CVSS 2.5). The limited severity suggests constrained impact, typically requiring specific conditions or local access for…

Is there a public PoC exploit available for EUVD-2026-12468?

Yes, a public proof-of-concept exploit is available for EUVD-2026-12468. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-12468?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Google EUVD-2026-12468

Q: What is the CVSS score of EUVD-2026-12468?

EUVD-2026-12468 has a CVSS 4.0 base score of 1.1 (Low). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4251 LOW

Plaintext Storage of a Password (CWE-256)

2026-03-16 VulDB

Information Disclosure Google

1.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.1 LOW

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

2.0 (LOW) 1.1 (LOW)

CVSS changed

Apr 22, 2026 - 21:37 NVD

2.5 (LOW) 2.0 (LOW)

PoC Detected

Mar 17, 2026 - 14:20 vuln.today

Public exploit code

EUVD ID Assigned

Mar 16, 2026 - 17:19 euvd

EUVD-2026-12468

Analysis Generated

Mar 16, 2026 - 17:19 vuln.today

CVE Published

Mar 16, 2026 - 16:02 nvd

LOW 2.5

DescriptionCVE.org

A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. Affected by this vulnerability is an unknown functionality of the file resources/assets/flutter_assets/assets/credentials.json of the component ai.citydata.citychat. Executing a manipulation can lead to unprotected storage of credentials. The attack requires local access. A high complexity level is associated with this attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.