Log in Start free

MobSF

Products

ProductCVEsExploitedLatest
Mobile-Security-Framework-MobSF20–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-68923 Medium 6.5 MobSF: CSRF checks not enforced after Django migration 0.3%
  • CVE-2026-68927 Low 3.0 MobSF: SSRF port restriction bypass in assetlinks_check 0.3%
  • CVE-2026-68922 Medium 5.5 MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads 0.5%
  • CVE-2026-68924 Medium 4.9 MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction 0.6%
  • CVE-2026-33545 Medium 5.3 MobSF has SQL Injection in its SQLite Database Viewer Utils 0.3%
  • CVE-2026-24490 High 8.1 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field 0.3%
  • CVE-2025-58162 Medium 6.5 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction 0.6%
  • CVE-2025-58161 Low 1.3 MobSF Path Traversal in GET /download/<filename> using absolute filenames 0.8%
  • CVE-2025-46730 Medium 6.8 Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack 0.5%
  • CVE-2025-46335 High 8.6 Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload 0.3%
  • CVE-2025-31116 Medium 4.4 Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding 0.5%
  • CVE-2025-24803 High 8.4 Stored Cross-Site Scripting (XSS) in MobSF 0.4%
  • CVE-2025-24804 Medium 4.8 Partial Denial of Service (DoS) in MobSF 0.5%
  • CVE-2025-24805 High 8.5 Local Privilege Escalation in MobSF 0.4%
  • CVE-2024-53999 High 8.1 Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality 0.5%
  • CVE-2024-54000 High 7.5 Mobile Security Framework (MobSF) bypass of SSRF fix 0.4%
  • CVE-2024-43399 High 8.0 Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files 1.0%
  • CVE-2024-41955 Medium 5.2 Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect 1.0%
  • CVE-2024-31215 Medium 6.3 Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check 0.5%
  • CVE-2024-29190 High 7.5 MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns) 0.7%