Vulnerability · Published Jun 6, 2025 · Assigned by Vivo

CVE-2025-5719

Medium 5.1

In plain English

A medium-severity missing authentication in Wallet from vivo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium

Exploit odds (30 days)0.2%top 84.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The wallet has an authentication bypass vulnerability that allows access to specific pages.

Affected products (as reported)

Vendor	Product	Versions
vivo	Wallet	Versions below 5.1.8.0

Weakness: CWE-306 · Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

References

https://www.vivo.com/en/support/security-advisory-detail?id=18