What’s Vulnerable › Vulnerabilities

CVE-2025-66555: AirKeyboard iOS App 1.0.5 - Remote Input Injection

• Severity: high (CVSS 8.8 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-04 · updated 2026-10-18
• Weakness: CWE-306

Description

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control.

Affected products

• airkeyboardapp AirKeyboard iOS App: 1.0.5

References

• https://airkeyboardapp.com
• https://apps.apple.com/us/app/air-keyboard/id6463187929
• https://www.exploit-db.com/exploits/52333
• https://www.vulncheck.com/advisories/airkeyboard-ios-app-105-remote-input-injection

Get alerted when CVE-2025-66555 or the next vulnerability affects your stack