Skip to content
Mobsf vulnerabilities
Newest
-
mobsf mobile-security-framework-mobsf
MobSF: CSRF checks not enforced after Django migration
CVE-2026-68923
Fix available
6.5 Medium
-
mobsf mobile-security-framework-mobsf
MobSF: SSRF port restriction bypass in assetlinks_check
CVE-2026-68927
Fix available
3.0 Low
-
mobsf mobile-security-framework-mobsf
MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads
CVE-2026-68922
Fix available
5.5 Medium
-
mobsf mobile-security-framework-mobsf
MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction
CVE-2026-68924
Fix available
4.9 Medium
-
mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more
MobSF has SQL Injection in its SQLite Database Viewer Utils
CVE-2026-33545
Fix available
5.3 Medium
-
mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
CVE-2026-24490
Fix available
8.1 High
-
mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
CVE-2025-58162
Fix available
6.5 Medium
-
mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more
MobSF Path Traversal in GET /download/<filename> using absolute filenames
CVE-2025-58161
Fix available
1.3 Low
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
CVE-2025-46730
6.8 Medium
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
CVE-2025-46335
Fix available
8.6 High
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
CVE-2025-31116
Fix available
4.4 Medium
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Stored Cross-Site Scripting (XSS) in MobSF
CVE-2025-24803
Fix available
8.4 High
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Partial Denial of Service (DoS) in MobSF
CVE-2025-24804
Fix available
4.8 Medium
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Local Privilege Escalation in MobSF
CVE-2025-24805
Fix available
8.5 High
-
mobsf mobile security framework, mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
CVE-2024-53999
Fix available
8.1 High
-
mobsf mobile security framework, mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) bypass of SSRF fix
CVE-2024-54000
Fix available
7.5 High
-
mobsf mobile security framework, mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
CVE-2024-43399
Fix available
8.0 High
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect
CVE-2024-41955
Fix available
5.2 Medium
-
opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more
Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check
CVE-2024-31215
Fix available
6.3 Medium
-
mobsf mobile security framework, mobile-security-framework-mobsf +1 more
MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
CVE-2024-29190
Fix available
7.5 High