CVE-2025-66555CWE-306

CVE-2025-66555

published December 5, 2025

CVSS
8.8
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00678 · 51.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-12-05T02:16Z
References (4)
https://airkeyboardapp.com · [email protected]https://apps.apple.com/us/app/air-keyboard/id6463187929 · [email protected]https://www.exploit-db.com/exploits/52333 · [email protected]https://www.vulncheck.com/advisories/airkeyboard-ios-app-105-remote-input-injection · [email protected]
EPSS history
Timeline
  • 04 DEC 20:43Z
    AirKeyboard iOS App 1.0.5 - Remote Input Injection
    cvelistv5