Priority HIGH 76
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00956 · Published 2024-08-19 · Fixed in 4.0.7 CWE-23
Priority HIGH 75
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00483 · Published 2025-03-31 · Fixed in 4.3.2 CWE-918
Priority HIGH 72
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
CVSS 4.0HIGH 8.6· Network · Low privileges · User interaction · EPSS 0.00326 · Published 2025-05-05 · Fixed in 4.3.3 CWE-79
Priority HIGH 72
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
CVSS 4.0HIGH 8.5· Network · Low privileges · User interaction · EPSS 0.00364 · Published 2025-02-05 · Fixed in 4.3.1 CWE-269
Priority HIGH 72
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
CVSS 4.0HIGH 8.4· Network · High privileges · User interaction · EPSS 0.00388 · Published 2025-02-05 · Fixed in 4.3.1 CWE-79
Priority HIGH 72
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00413 · Published 2024-12-03 · Fixed in 3.9.7 CWE-918
Priority HIGH 72
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00712 · Published 2024-03-22 · Fixed in 0.3.8 CWE-918
Priority HIGH 72
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00852 · Published 2023-09-21 · No fix listed CWE-276
Priority HIGH 72
Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.py script.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01529 · Published 2022-10-18 · Fixed in 0.9.3 CWE-98
Priority HIGH 70
MobSF is a mobile application security testing tool used.
CVSS 3.1HIGH 8.1· Network · High privileges · User interaction · EPSS 0.00349 · Published 2026-01-27 · Fixed in 4.4.5 CWE-79
Priority HIGH 70
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
CVSS 3.1HIGH 8.1· Network · High privileges · User interaction · EPSS 0.00515 · Published 2024-12-03 · Fixed in 4.2.9 CWE-79
Priority MEDIUM 63
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.0053 · Published 2025-05-05 · No fix listed CWE-409
Priority MEDIUM 62
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00286 · Published 2026-03-26 · Fixed in 4.4.6 CWE-89
Priority MEDIUM 62
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00592 · Published 2025-09-02 · Fixed in 4.4.1 CWE-22
Priority MEDIUM 58
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00458 · Published 2026-08-18 · Fixed in 4.5.1 CWE-22
Priority MEDIUM 56
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00587 · Published 2026-08-18 · Fixed in 4.5.1 CWE-400
Priority MEDIUM 55
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00463 · Published 2025-02-05 · Fixed in 4.3.1 CWE-1287
Priority MEDIUM 48
MobSF is a mobile application security testing tool used.
CVSS 3.1LOW 3.0· Network · High privileges · No interaction · EPSS 0.00331 · Published 2026-08-18 · Fixed in 4.5.1 CWE-918
Priority MEDIUM 41
MobSF is a mobile application security testing tool used.
CVSS 4.0LOW 1.3· Network · Low privileges · No interaction · EPSS 0.00827 · Published 2025-09-02 · Fixed in 4.4.1 CWE-22
Priority LOW 29
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.0051 · Published 2024-04-04 · Fixed in 3.9.8 CWE-918
Priority LOW 28
MobSF is a mobile application security testing tool used.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00264 · Published 2026-08-18 · Fixed in 4.5.1 CWE-352
Priority LOW 26
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01 · Published 2024-07-31 · Fixed in 4.0.5 CWE-601
THREATIST.IORead the docs