TI-2026-48462 CVE-2026-68923 · GHSA-3p54-567p-2wpr
MobSF: CSRF checks not enforced after Django migration
Priority LOW 28
MobSF is a mobile application security testing tool used.
Vulnerabilities
22 records
TI-2026-48464 CVE-2026-68927 · GHSA-95px-34x5-p37h
MobSF: SSRF port restriction bypass in assetlinks_check
Priority MEDIUM 48
MobSF is a mobile application security testing tool used.
TI-2026-48461 CVE-2026-68922 · GHSA-8j49-mmcx-4mp5
MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads
Priority MEDIUM 58
MobSF is a mobile application security testing tool used.
TI-2026-48463 CVE-2026-68924 · GHSA-x768-8642-mmq9
MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction
Priority MEDIUM 56
MobSF is a mobile application security testing tool used.
TI-2026-25938 CVE-2026-33545 · GHSA-hqjr-43r5-9q58
MobSF has SQL Injection in its SQLite Database Viewer Utils
Priority MEDIUM 62
MobSF is a mobile application security testing tool used.
TI-2026-19742 CVE-2026-24490 · GHSA-8hf7-h89p-3pqj
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Priority HIGH 70
MobSF is a mobile application security testing tool used.
TI-2025-35978 CVE-2025-58162 · GHSA-9gh8-9r95-3fc3
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Priority MEDIUM 62
MobSF is a mobile application security testing tool used.
TI-2025-35977 CVE-2025-58161 · GHSA-ccc3-fvfx-mw3v
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Priority MEDIUM 41
MobSF is a mobile application security testing tool used.
TI-2025-29401 CVE-2025-46730 · GHSA-c5vg-26p8-q8cr
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Priority MEDIUM 63
MobSF is a mobile application security testing tool used.
TI-2025-29076 CVE-2025-46335 · GHSA-mwfg-948f-2cc5
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Priority HIGH 72
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
TI-2025-22377 CVE-2025-31116 · GHSA-fcfq-m8p6-gw56
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Priority HIGH 75
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
TI-2025-18520 CVE-2025-24803 · GHSA-cxqq-w3x5-7ph3
Stored Cross-Site Scripting (XSS) in MobSF
Priority HIGH 72
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
TI-2025-18521 CVE-2025-24804 · GHSA-jrm8-xgf3-fwqr
Partial Denial of Service (DoS) in MobSF
Priority MEDIUM 55
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
TI-2025-18522 CVE-2025-24805 · GHSA-79f6-p65j-3m2m
Local Privilege Escalation in MobSF
Priority HIGH 72
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework.
TI-2024-36154 CVE-2024-53999 · GHSA-5jc6-h9w7-jm3p
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
Priority HIGH 70
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
TI-2024-36155 CVE-2024-54000 · GHSA-m435-9v6r-v5f6
Mobile Security Framework (MobSF) bypass of SSRF fix
Priority HIGH 72
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
TI-2024-29048 CVE-2024-43399 · GHSA-4hh3-vj32-gr6j
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
Priority HIGH 76
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
TI-2024-27977 CVE-2024-41955 · GHSA-8m9j-2f32-2vx4
Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect
Priority LOW 26
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
TI-2024-20592 CVE-2024-31215 · GHSA-wpff-wm84-x5cx
Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check
Priority LOW 29
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile.
TI-2024-19359 CVE-2024-29190 · GHSA-wfgj-wrgh-h3r3
MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Priority HIGH 72
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
TI-2023-22544 CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.
Priority HIGH 72
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.
TI-2022-19955 CVE-2022-41547 · GHSA-f42p-vc8p-7x54
Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file…
Priority HIGH 72
Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.py script.