Vulnerabilities

Summary — last 7 days

New vulnerabilities2,568▼ 331 vs. last week
Critical / high1,352▲ 94 vs. last week
New active exploitation (KEV)5▼ 7 vs. last week
Unscored (no CVSS)56▼ 472 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)2.5%—1byte Copy91byte Exactspy1byte Fonetracker1byte Guestspy+52/24/20226/17/2026
The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.