CVE-2026-68927

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-68927
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68927.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68927
Aliases
Published
2026-08-18T17:48:42Z
Modified
2026-08-20T03:54:42Z
Severity
  • 3.0 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N CVSS Calculator
Summary
MobSF: SSRF port restriction bypass in assetlinks_check
Details

MobSF is a mobile application security testing tool used. Prior to 4.5.1, get_browsable_activities in mobsf/StaticAnalyzer/views/android/manifest_analysis.py validates only an Android manifest android:host value with valid_host before appending a separately supplied android:port to the URL fetched by _check_url, allowing an authenticated user to upload a crafted APK that makes requests to an attacker-selected nonstandard port at /.well-known/assetlinks.json. With an attacker-controlled hostname and DNS rebinding between validation and the requests.get connection, the request can reach an internal service, although redirects remain disabled and the path is fixed. This issue is fixed in version 4.5.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68927.json"
}
References

Affected packages

Git / github.com/mobsf/mobile-security-framework-mobsf

Affected ranges

Type
GIT
Repo
https://github.com/mobsf/mobile-security-framework-mobsf
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
62563ca429a75b3e5d47a13b958e1d2e7d5e2bbf
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.5.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.8.3
0.8.4
0.8.5
0.8.6
0.8.7
0.8.8
0.8.8.1
0.8.8.2
0.9
0.9.1
v0.*
v0.9.2
v0.9.3
v0.9.3.1
v0.9.3.2
v0.9.3.3
v0.9.3.5
v0.9.3.6
v0.9.3.7
v0.9.4
v0.9.4.1
v0.9.4.2
v0.9.5
v0.9.5.2
v0.9.5.4
v0.9.5.5
v1.*
v1.0.3Beta
v1.1.5
v1.1.6
v2.*
v2.0.0
v3.*
v3.0.0
v3.0.1
v3.0.5
v3.1.1
v3.2.6
v3.2.8
v3.2.9
v3.3.3
v3.3.5
v3.4.0
v3.4.3
v3.4.6
v3.5.0
v3.6.0
v3.6.9
v3.7.6
v3.9.7
v4.*
v4.0.7
v4.1.3
v4.3.0
v4.3.2
v4.4.1
v4.4.2
v4.4.5
v4.4.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68927.json"