CVE-2025-26700

MediumCVSS 5.2/10Last modified Jun 17, 2026

Description

Authentication bypass using an alternate path or channel issue exists in ”RoboForm Password Manager" App for Android versions prior to 9.7.4, which may allow an attacker with access to a device where the application is installed to bypass the lock screen and obtain sensitive information.

Metrics

CVSS 3.0 5.2/10CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-288

Affected software

VendorProductVersions
Siber Systems, Inc.RoboForm Password Managerprior to 9.7.4

References

Timeline

Published
Feb 17, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-2670110.0An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service account credentials can lead to SSH access, use CVE-2025-267027.5Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.CVE-2025-267034.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1CVE-2025-267044.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1CVE-2025-267057.5Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1CVE-2025-267065.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1CVE-2025-267075.3Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1CVE-2025-267084.2There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuCVE-2025-267095.7There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized atCVE-2025-26716.3A vulnerability was found in Yue Lao Blind Box 月老盲盒 up to 4.0. It has been declared as critical. This vulnerability affects the function basCVE-2025-267103.5There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control mechanism, attackers cCVE-2025-267115.7There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized
CVE-2025-26700: Medium severity, CVSS 5.2 | Vulnix