TI-2025-23919 CVE-2025-32889 · GHSA-j4xm-9jmh-g7cv
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 39
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
goTenna
Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
goTenna records in CISA KEVNo goTenna vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records in Gotenna · all components
TI-2025-23918 CVE-2025-32888 · GHSA-jqgh-w22q-m24f
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
Priority LOW 39
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
TI-2025-23917 CVE-2025-32887 · GHSA-vv8p-v9q5-4pvf
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 30
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
TI-2024-30704 CVE-2024-45723 · GHSA-rgqq-jvq6-w93r
goTenna Pro ATAK Plugin Use of Cryptographically Weak Pseudo-Random Number Generator
Priority LOW 30
The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys.
TI-2025-23920 CVE-2025-32890 · GHSA-vg58-p724-725x
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
Priority LOW 28
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
TI-2025-23915 CVE-2025-32885 · GHSA-f5qp-wfgr-pm73
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 28
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
TI-2025-23914 CVE-2025-32884 · GHSA-9rr5-mrc9-96h4
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
Priority LOW 28
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.
TI-2025-23912 CVE-2025-32881 · GHSA-9cgq-h66g-4xhp
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 28
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
TI-2024-30430 CVE-2024-45374 · GHSA-5257-g4x8-28qj
goTenna Pro ATAK Plugin Weak Password Requirements
Priority LOW 28
The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method.
TI-2025-23913 CVE-2025-32882 · GHSA-fgj7-v5cr-wfmr
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 27
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
TI-2024-27781 CVE-2024-41722 · GHSA-xw45-w4r2-g9c2
goTenna Pro ATAK Plugin Weak Authentication
Priority LOW 26
In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GID and Callsign using a software defined radio in existing goTenna mesh networks.
TI-2024-28780 CVE-2024-43108 · GHSA-pf8r-hfj4-5hrm
goTenna Pro ATAK Plugin Missing Support for Integrity Check
Priority LOW 25
The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms.
TI-2025-23916 CVE-2025-32886 · GHSA-r3g9-3r7f-gg8r
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
Priority LOW 24
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
TI-2024-29407 CVE-2024-43814 · GHSA-vcw2-g6r2-h5hh
goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data
Priority LOW 23
The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates every 60 seconds once the plugin is active and goTenna is connected.
TI-2024-27954 CVE-2024-41931 · GHSA-4v4q-xr4r-hm4m
goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data
Priority LOW 23
The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message.
TI-2024-30797 CVE-2024-45838 · GHSA-jg3f-p7fw-74wx
goTenna Pro ATAK Plugin Cleartext Transmission of Sensitive Information
Priority LOW 11
The goTenna Pro ATAK Plugin does not encrypt callsigns in messages.