CVE-2026-47362

MediumCVSS 4.6/10Last modified Oct 23, 2026

Description

In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, tags, and on-call/incident deep links) and SearchRecentDatabase (the user's full in-app search history). Impact: Any actor able to bypass the app sandbox can read these databases in plaintext.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-922

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 7, 2026
Last modified
Oct 23, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-473636.3In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied CVE-2026-473646.5In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no userCVE-2026-473659.9Argument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM, allows remote authenticated users to bypass croCVE-2026-473667.2Improper verification of access permissions when modifying permissions through the Administration Control Panel (ACP) allowed an authenticatCVE-2026-473679.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID EnterpCVE-2026-473688.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices running UniFi OS to obtaiCVE-2026-473699.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain deCVE-2026-47377.3Use After Free vulnerability in No-Chicken Echo-Mate (‎SDK/rv1106-sdk/sysdrv/source/kernel/mm modules). This vulnerability is associated witCVE-2026-473709.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain deCVE-2026-473729.1Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, CVE-2026-473737.5Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. DiscreCVE-2026-473756.0NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, an authenticated user with columnAdd permission on a Postgres