CVE-2026-24490 | MobSF Mobile-Security-Framework-MobSF up to 4.4.4 APK cross site scripting

A vulnerability was found in MobSF Mobile-Security-Framework-MobSF up to 4.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component APK Handler. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-24490. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.