CVE-2026-103906
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 09, 2026
Vendor
unknown
Description
Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries.