What’s Vulnerable › Vulnerabilities

CVE-2025-26700

• Severity: medium (CVSS 5.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-17 · updated 2026-06-17
• Weakness: CWE-288

Description

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information.

Affected products

• Siber Systems, Inc. RoboForm Password Manager: before 9.7.4

References

• https://jvn.jp/en/vu/JVNVU92071645/
• https://www.roboform.com/news-android

Get alerted when CVE-2025-26700 or the next vulnerability affects your stack