LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2025-48605

CVE-2025-48605 - Vulnerability Analysis

HighCVSS: 8.4

Last Updated: March 3, 2026

KeyguardViewMediator - Authentication Bypass

Published: March 2, 2026Updated: March 3, 2026

Overview

KeyguardViewMediator contains a lockscreen bypass caused by a logic error in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

Severity & Score

Severity: High
CVSS Score: 8.4
EPSS Score: 0.7%(Probability of exploitation in next 30 days)

Impact

Local attackers can bypass lockscreen to escalate privileges without needing extra execution rights.

Mitigation

Update to the latest version containing the fix.

Social Media Activity(1 post)

TheHackerWire
TheHackerWire
@thehackerwire
Mar 3, 2026

🟠 CVE-2025-48605 - High (8.4) In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2025-48605/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2025-48605
Severity
High
CVSS Score
8.4
Type
broken_access_control
Status
confirmed
EPSS
0.7%
Social Posts
1

CWE

  • CWE-693

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.7%Probability of exploitation in the next 30 days