Medium
CVE-2026-68924
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2026-68922
MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads
Low
CVE-2026-68927
MobSF has SSRF port restriction bypass in assetlinks_check
Medium
CVE-2026-68923
MobSF's CSRF checks not enforced after Django migration
Medium
CVE-2026-33545
MobSF has SQL Injection in its SQLite Database Viewer Utils
High
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Low
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Medium
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Medium
CVE-2025-46335
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Medium
CVE-2025-46730
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
High
CVE-2025-24804
MobSF Partial Denial of Service (DoS)
High
CVE-2025-24803
MobSF Stored Cross-Site Scripting (XSS)
High
CVE-2025-24805
MobSF Local Privilege Escalation
Medium
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
Medium
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
High
CVE-2024-43399
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
Medium
CVE-2024-31215
Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check
High
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
Medium
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
High
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
High
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
High
CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not in
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.