fatcatapps — Vulnerabilities & Security Advisories 19

Fatcatapps develops mobile applications for iOS and Android platforms, primarily serving businesses with productivity and customer engagement tools. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure authentication mechanisms. The company has faced scrutiny for delayed patching practices, with multiple CVEs remaining unaddressed for extended periods. In 2022, a critical authentication bypass vulnerability in their flagship product exposed sensitive user data, affecting over 50,000 accounts. Security researchers have noted inconsistent security protocols across their application suite, with newer releases sometimes introducing previously fixed vulnerabilities.