CVE-2025-11598CWE-359

Exposure of Confidential Information in mObywatel application

Low · published February 3, 2026

CVSS v4.0
1.0
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended (reopening the app would require the user to log in). The data exposed depends on the last application view displayed before the application was minimized

This issue was fixed in version 4.71.0

The record
Technical detail
CVSS v4.0
1.0 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2026-02-03T11:33Z
EPSS history
Timeline
  • 03 FEB 11:33Z
    Exposure of Confidential Information in mObywatel application
    cvelistv5