CVE-2025-26700CWE-288

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow…

Medium · published February 17, 2025

CVSS v3.0
5.2
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information.

The record
Technical detail
CVSS v3.0
5.2 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-02-17T02:59Z
EPSS history
Timeline
  • 17 FEB 02:59Z
    Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow…
    cvelistv5