CERT-In Reports Security Flaw in Tinxy App: Upgrade Now to Stay Safe

**Executive Summary:** CERT-In advisory CIVN-2024-0355 (CVE-2024-12094) details a medium-severity information-disclosure vulnerability in the Tinxy IoT management mobile app (all versions prior to 663000) where usernames, email addresses, and mobile numbers are stored in plaintext on-device; exploitation requires physical access to a rooted or jailbroken device and users are advised to update to version 663000 or later.