What is CVE-2026-47362?

CVE-2026-47362 is a medium-severity vulnerability in Datadog Android App, classified under CWE-922. CVSS score: 4.6/10. Published 2026-08-07.

How severe is CVE-2026-47362?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Datadog Android App

CVE-2026-47362

In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recipient, service, tags, and on-call/incident deep links) and SearchRecentDatabase (the user's full in-app search history). Impact: Any actor able to bypass the app sandbox can read these databases in plaintext.

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Datadog Android App — versions 5.9.4

Weakness classification (CWE)

CWE-922

References

Frequently asked questions

What is CVE-2026-47362?: CVE-2026-47362 is a medium-severity vulnerability in Datadog Android App, classified under CWE-922. CVSS score: 4.6/10. Published 2026-08-07.
How severe is CVE-2026-47362?: Medium severity. CVSS v3 base score is 4.6 out of 10.