CVE-2026-8990CWE-288CWE-359
Authentication Bypass in Kidsview
Medium · published May 28, 2026
What it is
A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification.
This issue was fixed in version 4.4.3
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00283 · 19.7th percentile
- Weaknesses
- CWE-288 · Authentication Bypass Using an Alternate Path or Channel; CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
- Published
- 2026-05-28T13:27Z
EPSS history
Timeline