CVE-2025-63822 in SirenGPSinfo

Zusammenfassung

von MITRE • 06.08.2026

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the requesting user is authorized to access the target user's data.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

MITRE

Reservieren

27.10.2025

Veröffentlichung

06.08.2026

Moderieren

akzeptiert

Eintrag

VDB-386428

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Do you need the next level of professionalism?

Upgrade your account now!