Skip to content
OpenAdvisories

Vendor

MobSF

20 known vulnerabilities.

Products

Mobile-Security-Framework-MobSF 20
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.0
    CVE-2026-68927

    MobSF: SSRF port restriction bypass in assetlinks_check

    MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/manifest_analysis.py validates only an Android manifest android:host value with valid_host before appending a separately s…

    MobSF Mobile-Security-Framework-MobSF mobsf PyPI
  • Low 1.3
    CVE-2025-58161

    MobSF Path Traversal in GET /download/<filename> using absolute filenames

    MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path verification via os.path.commonprefix, which allows an authenticated user to download files outside the DWD_DIR download directory from "neig…

    MobSF Mobile-Security-Framework-MobSF mobsf PyPI