CVE-2026-7671 - Vulnerability Analysis
LowCVSS: 3.7Last Updated: May 3, 2026
CodeWise Tornet Scooter Mobile App - Authentication Bypass
Published: May 3, 2026Updated: May 3, 2026PoC AvailableRemote Exploitable
Overview
CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android contains an improper restriction of excessive authentication attempts caused by manipulation of an unknown function in /TwoFactor, letting remote attackers perform brute force attacks, exploit requires complex attack conditions.
Severity & Score
Severity: Low
CVSS Score: 3.7
Impact
Remote attackers can perform brute force attacks to bypass authentication, potentially leading to unauthorized access.
Mitigation
Update to the latest version when available.
References
Related Resources
Details
- CVE ID
- CVE-2026-7671
- Severity
- Low
- CVSS Score
- 3.7
- Type
- broken_authentication
- Status
- new
CWE
- CWE-307
CVSS Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N