CVE-2025-61116: AdForest – Classified Android App · Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 11:07 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 27% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 30 Oct 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Developers should immediately revise the authentication mechanism to replace the Base64-encoded email authorization with secure, cryptographically strong tokens such as OAuth tokens or JWTs with proper signature validation. Implement strict server-side validation of all authorization credentials and ensure that authentication tokens cannot be easily decoded or manipulated. Introduce multi-factor authentication (MFA) to add an additional layer of security for user accounts. Conduct thorough security testing, including penetration testing and code reviews focused on authentication and access control. Users should be advised to update the app once a patch is released and to use strong, unique passwords. Organizations should monitor for suspicious account activity and implement anomaly detection to identify potential unauthorized access. Additionally, educating users about phishing and credential security can reduce the risk of attackers obtaining valid email addresses. Finally, maintain compliance with GDPR by promptly addressing breaches and notifying affected users if compromise occurs.
Description
AdForest - Classified Android App version 4.0.12 (package name scriptsbundle.adforest), developed by Muhammad Jawad Arshad, contains an improper access control vulnerability in its authentication mechanism. The app uses a Base64-encoded email address as the authorization credential, which can be manipulated by attackers to gain unauthorized access to user accounts. Successful exploitation could result in account compromise, privacy breaches, and misuse of the platform.