CVE-2025-63823

Published: Aug 5, 2026Modified: Oct 12, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://github.com/Leoccc98/cve-reports/blob/main/advisories/CVE-2025-63823/README.md

Source: cve@mitre.org

https://play.google.com/store/apps/details?id=com.safetipin.mysafetipin

Source: cve@mitre.org

Timeline

No history available yet.