CVE-2026-4218 | myAEDES App up to 1.18.4 on Android aedes.me.beta EngageBayUtils.java AUTH_KEY information disclosure

A vulnerability was found in myAEDES App up to 1.18.4 on Android. It has been rated as problematic. Affected is an unknown function of the file aedes/me/beta/utils/EngageBayUtils.java of the component aedes.me.beta. Performing a manipulation of the argument AUTH_KEY results in information disclosure.

This vulnerability is identified as CVE-2026-4218. The attack is only possible with local access. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.