A vulnerability, which was classified as critical, has been found in Xtooltech Xtool AnyScan Android Application up to 4.40.40. Affected by this issue is some unknown functionality of the component SSL Handler. Performing manipulation results in improper certificate validation.

This vulnerability is identified as CVE-2025-63432. The attack can be initiated remotely. There is not any exploit available.