CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-104585

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.

Status: Published
Published: 2026-10-13
Updated: 2026-10-14
Assigning organization: mitre

Description

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/MobileSecurityFramework/Mobile-Security-Framework-MobSF/blob/master/mobsf/DynamicAnalyzer/views/android/tests_common.py ↗
https://github.com/AmalJafarzade/CVE-2026-104585 ↗