Auth bypass in Groww Stock, Mutual Fund, Gold App
CVE-2026-12065
A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of the component WebView URL Handler. The manipulation leads to improper authorization in handler for custom url s…
EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 1.8 (Low). Vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Groww Stock, Mutual Fund, Gold App — versions 20260805
Weakness classification (CWE)
References
- cna@vuldb.com (exploit)
- cna@vuldb.com (related)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
Frequently asked questions
- What is CVE-2026-12065?
- CVE-2026-12065 is a low-severity vulnerability in Groww Stock, Mutual Fund, Gold App, classified under Improper Authorization. CVSS score: 1.8/10. Published 2026-06-12.
- How severe is CVE-2026-12065?
- Low severity. CVSS v3 base score is 1.8 out of 10.