Vulnerability in N/a
CVE-2025-61118
mCarFix Motorists App version 2.3 (package name com.skytop.mcarfix), developed by Paniel Mwaura, contains improper access control vulnerabilities. Attackers may bypass verification to arbitrarily register accounts, and by tampering with sequential numeric IDs, gain unauthorized access to user data and groups. Successful exploitation could result in fake account creation, privacy breaches, and misuse of the platform.
EPSS: 0.003 (21.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- N/a — versions n/a
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-61118?
- CVE-2025-61118 is a high-severity vulnerability in N/a, classified under Improper Access Control. CVSS score: 7.5/10. Published 2025-10-30.
- How severe is CVE-2025-61118?
- High severity. CVSS v3 base score is 7.5 out of 10.