Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mobile-Security-Framework-MobSF — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Mobile-Security-Framework-MobSF, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses associated with the Mobile-Security-Framework-MobSF product developed by MobSF. The collection encompasses a diverse range of vulnerability types, including remote code execution, local privilege escalation, and information disclosure, covering the timeline from the framework's initial release through its most recent public updates. Visitors can utilize this resource to track the vendor's historical security advisories, analyze the prevalence of specific weakness classes within mobile analysis tools, or review the complete vulnerability history of the MobSF platform to assess potential risks in their own security workflows. By centralizing these data points, the page serves as a practical reference for security researchers, penetration testers, and software maintainers who need to understand the evolving threat landscape surrounding static and dynamic mobile application analysis. The aggregated information supports informed decision-making regarding patch management and configuration hardening without relying on scattered external reports. Users seeking to validate the security posture of their mobile testing environments will find detailed context on how each identified flaw impacts the framework's functionality and data integrity. This comprehensive overview facilitates a deeper understanding of the product's security evolution over time while providing actionable insights for mitigating known risks in mobile security assessments.

Vendor: MobSF

CVE ID Title CVSS Severity Published
CVE-2026-68923 MobSF: CSRF checks not enforced after Django migration CWE-352 6.5 Medium 2026-08-18
CVE-2026-68927 MobSF: SSRF port restriction bypass in assetlinks_check CWE-918 3.0 Low 2026-08-18
CVE-2026-68922 MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads CWE-22 5.5 Medium 2026-08-18
CVE-2026-68924 MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction CWE-400 4.9 Medium 2026-08-18
CVE-2026-33545 MobSF has SQL Injection in its SQLite Database Viewer Utils CWE-89 5.3 Medium 2026-03-26
CVE-2026-24490 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field CWE-79 8.1 High 2026-01-27
CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction CWE-22 6.5 Medium 2025-09-02
CVE-2025-58161 MobSF Path Traversal in GET /download/<filename> using absolute filenames CWE-22 6.5AI Medium AI 2025-09-02
CVE-2025-46730 Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack CWE-409 6.8 Medium 2025-05-05
CVE-2025-46335 Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload CWE-79 5.4AI Medium AI 2025-05-05
CVE-2025-31116 Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding CWE-918 4.4 Medium 2025-03-31
CVE-2025-24803 Stored Cross-Site Scripting (XSS) in MobSF CWE-79 6.5 - 2025-02-05
CVE-2025-24804 Partial Denial of Service (DoS) in MobSF CWE-1287 6.5 - 2025-02-05
CVE-2025-24805 Local Privilege Escalation in MobSF CWE-269 6.1 - 2025-02-05
CVE-2024-53999 Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality CWE-79 8.1 High 2024-12-03
CVE-2024-54000 Mobile Security Framework (MobSF) bypass of SSRF fix CWE-918 7.5 High 2024-12-03
CVE-2024-43399 Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files CWE-23 8.0 High 2024-08-19
CVE-2024-41955 Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect CWE-601 5.2 Medium 2024-07-31
CVE-2024-31215 Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check CWE-918 6.3 Medium 2024-04-04
CVE-2024-29190 MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns) CWE-918 7.5 High 2024-03-22

All 20 known CVE vulnerabilities affecting Mobile-Security-Framework-MobSF with full Chinese analysis, references, and POCs where available.