CVE-2026-68927 | MobSF up to 4.5.0 Android Manifest Analysis manifest_analysis.py get_browsable_activities dns rebinding

August 18, 2026 Yanac

A vulnerability labeled as problematic has been found in MobSF up to 4.5.0. This impacts the function get_browsable_activities of the file mobsf/StaticAnalyzer/views/android/manifest_analysis.py of the component Android Manifest Analysis. The manipulation results in reliance on reverse dns resolution.

This vulnerability is cataloged as CVE-2026-68927. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More