Mobsf Mobile-security-framework-mobsf vulnerabilities

• mobsf mobile-security-framework-mobsf MobSF: CSRF checks not enforced after Django migration CVE-2026-68923 Fix available 6.5 MediumAugust 18, 2026
• mobsf mobile-security-framework-mobsf MobSF: SSRF port restriction bypass in assetlinks_check CVE-2026-68927 Fix available 3.0 LowAugust 18, 2026
• mobsf mobile-security-framework-mobsf MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads CVE-2026-68922 Fix available 5.5 MediumAugust 18, 2026
• mobsf mobile-security-framework-mobsf MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction CVE-2026-68924 Fix available 4.9 MediumAugust 18, 2026
• mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more MobSF has SQL Injection in its SQLite Database Viewer Utils CVE-2026-33545 Fix available 5.3 MediumMarch 24, 2026
• mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field CVE-2026-24490 Fix available 8.1 HighJanuary 26, 2026
• mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction CVE-2025-58162 Fix available 6.5 MediumSeptember 2, 2025
• mobsf mobile-security-framework-mobsf, opensecurity mobile security framework +1 more MobSF Path Traversal in GET /download/<filename> using absolute filenames CVE-2025-58161 Fix available 1.3 LowSeptember 2, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack CVE-2025-46730 6.8 MediumMay 5, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload CVE-2025-46335 Fix available 8.6 HighMay 5, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding CVE-2025-31116 Fix available 4.4 MediumMarch 31, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Stored Cross-Site Scripting (XSS) in MobSF CVE-2025-24803 Fix available 8.4 HighFebruary 5, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Partial Denial of Service (DoS) in MobSF CVE-2025-24804 Fix available 4.8 MediumFebruary 5, 2025
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Local Privilege Escalation in MobSF CVE-2025-24805 Fix available 8.5 HighFebruary 5, 2025
• mobsf mobile security framework, mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality CVE-2024-53999 Fix available 8.1 HighDecember 3, 2024
• mobsf mobile security framework, mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) bypass of SSRF fix CVE-2024-54000 Fix available 7.5 HighDecember 3, 2024
• mobsf mobile security framework, mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files CVE-2024-43399 Fix available 8.0 HighAugust 19, 2024
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect CVE-2024-41955 Fix available 5.2 MediumJuly 31, 2024
• opensecurity mobile security framework, mobsf mobile-security-framework-mobsf +1 more Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check CVE-2024-31215 Fix available 6.3 MediumApril 4, 2024
• mobsf mobile security framework, mobile-security-framework-mobsf +1 more MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns) CVE-2024-29190 Fix available 7.5 HighMarch 22, 2024