CFMOTO

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CFMOTO records in CISA KEV

No CFMOTO vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-10715 CVE-2025-11690 · GHSA-32wm-p53q-684m

IDOR vulnerability in the CFMOTO RIDE API

LOW 36

An Insecure Direct Object Reference (IDOR) vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00169 Published 2025-11-04 No fix listed CWE-639

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0