Vulnerability · Published Jun 12, 2026 · Assigned by Vivo

CVE-2026-11535

Critical 9.4

In plain English

A critical-severity missing authentication in PcSuite from vivo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 4% of all known vulnerabilities).

Severity (CVSS 4.0)9.4Critical

Exploit odds (30 days)0.2%top 95.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device.

Affected products (as reported)

Vendor	Product	Versions
vivo	PcSuite	Versions below 6.2.5

Weakness: CWE-306 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H

References

https://www.vivo.com/en/support/security-advisory-detail?id=22