MobSF

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

MobSF records in CISA KEV

No MobSF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mobile Security Framework 18 records HIGH

Records

18 records in Mobile Security Framework · all components

TI-2024-29048 CVE-2024-43399 · GHSA-4hh3-vj32-gr6j

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

HIGH 76

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00956 Published 2024-08-19 Fixed in 4.0.7 CWE-23

TI-2025-22377 CVE-2025-31116 · GHSA-fcfq-m8p6-gw56

Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding

HIGH 75

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2025-03-31 Fixed in 4.3.2 CWE-918

TI-2025-29076 CVE-2025-46335 · GHSA-mwfg-948f-2cc5

Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload

HIGH 72

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.

CVSS 4.0HIGH 8.6 Network Low privileges User interaction EPSS 0.00326 Published 2025-05-05 Fixed in 4.3.3 CWE-79

TI-2025-18522 CVE-2025-24805 · GHSA-79f6-p65j-3m2m

Local Privilege Escalation in MobSF

HIGH 72

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00364 Published 2025-02-05 Fixed in 4.3.1 CWE-269

TI-2025-18520 CVE-2025-24803 · GHSA-cxqq-w3x5-7ph3

Stored Cross-Site Scripting (XSS) in MobSF

HIGH 72

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.

CVSS 4.0HIGH 8.4 Network High privileges User interaction EPSS 0.00388 Published 2025-02-05 Fixed in 4.3.1 CWE-79

TI-2024-36155 CVE-2024-54000 · GHSA-m435-9v6r-v5f6

Mobile Security Framework (MobSF) bypass of SSRF fix

HIGH 72

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2024-12-03 Fixed in 3.9.7 CWE-918

TI-2024-19359 CVE-2024-29190 · GHSA-wfgj-wrgh-h3r3

MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)

HIGH 72

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2024-03-22 Fixed in 0.3.8 CWE-918

TI-2023-22544 CVE-2023-42261

Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.

HIGH 72

Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00852 Published 2023-09-21 No fix listed CWE-276

TI-2022-19955 CVE-2022-41547 · GHSA-f42p-vc8p-7x54

Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file…

HIGH 72

Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.py script.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01529 Published 2022-10-18 Fixed in 0.9.3 CWE-98

TI-2026-19742 CVE-2026-24490 · GHSA-8hf7-h89p-3pqj

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

HIGH 70

MobSF is a mobile application security testing tool used.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00349 Published 2026-01-27 Fixed in 4.4.5 CWE-79

TI-2024-36154 CVE-2024-53999 · GHSA-5jc6-h9w7-jm3p

Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality

HIGH 70

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00515 Published 2024-12-03 Fixed in 4.2.9 CWE-79

TI-2025-29401 CVE-2025-46730 · GHSA-c5vg-26p8-q8cr

Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack

MEDIUM 63

MobSF is a mobile application security testing tool used.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0053 Published 2025-05-05 No fix listed CWE-409

TI-2026-25938 CVE-2026-33545 · GHSA-hqjr-43r5-9q58

MobSF has SQL Injection in its SQLite Database Viewer Utils

MEDIUM 62

MobSF is a mobile application security testing tool used.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00286 Published 2026-03-26 Fixed in 4.4.6 CWE-89

TI-2025-35978 CVE-2025-58162 · GHSA-9gh8-9r95-3fc3

MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MEDIUM 62

MobSF is a mobile application security testing tool used.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00592 Published 2025-09-02 Fixed in 4.4.1 CWE-22

TI-2025-18521 CVE-2025-24804 · GHSA-jrm8-xgf3-fwqr

Partial Denial of Service (DoS) in MobSF

MEDIUM 55

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00463 Published 2025-02-05 Fixed in 4.3.1 CWE-1287

TI-2025-35977 CVE-2025-58161 · GHSA-ccc3-fvfx-mw3v

MobSF Path Traversal in GET /download/<filename> using absolute filenames

MEDIUM 41

MobSF is a mobile application security testing tool used.

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.00827 Published 2025-09-02 Fixed in 4.4.1 CWE-22

TI-2024-20592 CVE-2024-31215 · GHSA-wpff-wm84-x5cx

Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check

LOW 29

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.0051 Published 2024-04-04 Fixed in 3.9.8 CWE-918

TI-2024-27977 CVE-2024-41955 · GHSA-8m9j-2f32-2vx4

Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect

LOW 26

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01 Published 2024-07-31 Fixed in 4.0.5 CWE-601

Open these records in search →

Critical	2
High	9
Medium	9
Low	2
No CVSS	0