CVE-2025-63822CWE-284broken-access-control

CVE-2025-63822

High · published August 6, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the requesting user is authorized to access the target user's data.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-08-06T02:17Z
References (2)
https://github.com/Leoccc98/cve-reports/blob/main/advisories/CVE-2025-63822/README.md · [email protected]https://play.google.com/store/apps/details?id=com.sirengps.mobile · [email protected]
EPSS history
Timeline
  • 05 AUG 00:00Z
    SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control
    cvelistv5