CVE-2026-5420 | Shinrays Games Goods Triple App up to 1.200 cats.goods.sort.sorting.games jRwTX.java AES_IV/AES_PASSWORD hard-coded key

A vulnerability marked as problematic has been reported in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.sort.sorting.games. Performing a manipulation of the argument AES_IV/AES_PASSWORD results in use of hard-coded cryptographic key
.

This vulnerability is known as CVE-2026-5420. Attacking locally is a requirement. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.