ByteOS Network

NVD Vulnerability Details :

CVE-2026-8990

Received

Source-cvd@cert.pl

Published At-28 May, 2026 | 14:16

Updated At-28 May, 2026 | 14:16

A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification. This issue was fixed in version 4.4.3

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.3	MEDIUM	CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-288	Primary	cvd@cert.pl
CWE-359	Primary	cvd@cert.pl

CWE ID: CWE-288

Type: Primary

Source: cvd@cert.pl

CWE ID: CWE-359

Type: Primary

Source: cvd@cert.pl

References

Hyperlink	Source	Resource
https://cert.pl/posts/2026/05/CVE-2026-8990	cvd@cert.pl	N/A
https://kidsview.pl/	cvd@cert.pl	N/A

Hyperlink: https://cert.pl/posts/2026/05/CVE-2026-8990

Source: cvd@cert.pl

Resource: N/A

Hyperlink: https://kidsview.pl/

Source: cvd@cert.pl

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History