My Invisalign App
Approved changes feed: RSS · Atom
cpe:2.3:a:align_technology:my_invisalign_app:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Align Technology (0c5966e8-a06b-5fcb-a4f6-b78d9f80a516) |
|---|---|
| Product | My Invisalign App (f8612ce9-a37c-54c5-9492-714c783ca1f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5456 |
vulnerable | 2026-06-08 08:07:03.725460 |
Align Technology My Invisalign App com.aligntech.myinvisalign.emea BuildConfig.java hard-coded key
LOW (3.3)
A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android. The impacted element is an unknown function of the file com/aligntech/myinvisalign/BuildConfig.java of the component com.aligntech.myinvisalign.emea. The manipulation of the argument CDAACCESS_TOKEN leads to use of hard-coded cryptographic key
. The attack must be carried out locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-03T06:15:12.186Z
Updated: 2026-04-03T15:37:33.677Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.