CVE-2026-68924
2 advisories.
PyPI/mobsf CVE-2026-68924: medium 4.9, EPSS 0.59%
MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction
Action: Upgrade mobsf to 4.5.1 or later.
pip install mobsf==4.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.1 | - |
Fixed versions
| 4.5.1 |
Sources
- osv: GHSA-x768-8642-mmq9
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-x768-8642-mmq9
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/pull/2627
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/62563ca429a75b3e5d47a13b958e1d2e7d5e2bbf
- https://github.com/MobSF/Mobile-Security-Framework-MobSF
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.5.1
CVE-2026-68924 · published · modified · JSON
PyPI/mobsf CVE-2026-68924: medium 4.9, EPSS 0.59%
MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction
Action: Upgrade mobsf to 4.5.1 or later.
pip install mobsf==4.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.1 | - |
Fixed versions
| 4.5.1 |
Sources
- osv: PYSEC-2026-3691
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-x768-8642-mmq9
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/pull/2627
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/62563ca429a75b3e5d47a13b958e1d2e7d5e2bbf
- https://github.com/MobSF/Mobile-Security-Framework-MobSF
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.5.1
- https://pypi.org/project/mobsf
- https://github.com/advisories/GHSA-x768-8642-mmq9
- https://nvd.nist.gov/vuln/detail/CVE-2026-68924
CVE-2026-68924 · published · modified · JSON