CVE-2025-63823

critical · 9.8

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values.

9.8

CVSS

0.4%

EPSS (exploit prob.)

37th

EPSS percentile

2026-08-05

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

References

https://github.com/Leoccc98/cve-reports/blob/main/advisories/CVE-2025-63823/README.md
https://play.google.com/store/apps/details?id=com.safetipin.mysafetipin

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-63823