Executive brief
MobSF has SQL Injection in its SQLite Database Viewer Utils
Affected products
- PyPI mobsf
Junglewise Threat Intelligence
CVE-2026-33545: PYSEC-2026-2662 - MobSF has SQL Injection in its SQLite Database Viewer Utils
CVE-2026-33545 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: mobsf (PyPI). Vendors: PyPI.
Related threats
- MobSF path traversal in icon analysis
- MobSF CSRF protection bypass after Django migration
- MobSF SSRF port restriction bypass in assetlinks_check
- MobSF ZIP/APK extraction denial of service via per-file size limit bypass
- PYSEC-2026-1668 - MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field