CVE-2026-72528
"Handmade Marketplace App - Creema" provided by CREEMA LTD.
Published Oct 15, 2026 · updated Oct 15, 2026 · CREEMA LTD. "Handmade Marketplace App - Creema" for Android
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.
Affected
- vendor CREEMA LTD. "Creema - Handmade Marketplace App" for iOSversion unspecified
- vendor CREEMA LTD. "Handmade Marketplace App - Creema" for Androidversion unspecified
Sources
- CVE.orgCVE-2026-72528
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishin
cve.org - NIST NVDCVE-2026-72528
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishin
nvd.nist.gov