VendorsFurbofurbo_mini_firmwareany version
Vulnerabilities

Furbo Furbo Mini Firmware any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2025-11646
Tomofun Furbo 360/Furbo Mini GATT Service access control
Published 2025-10-12 · Analyzed
8.1EPSS 0.006
CVE-2025-11643
Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials
Published 2025-10-12 · Analyzed
8.1EPSS 0.003
CVE-2025-11648
Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery
Published 2025-10-12 · Analyzed
7.4EPSS 0.005
CVE-2025-11649
Tomofun Furbo 360/Furbo Mini Root Account hard-coded password
Published 2025-10-12 · Analyzed
7.0EPSS 0.001
CVE-2025-11647
Tomofun Furbo 360/Furbo Mini GATT Service information disclosure
Published 2025-10-12 · Analyzed
6.8EPSS 0.006
CVE-2025-11638
Tomofun Furbo 360/Furbo Mini Bluetooth denial of service
Published 2025-10-12 · Analyzed
6.5EPSS 0.003
CVE-2025-11641
Tomofun Furbo 360/Furbo Mini Trial Restriction access control
Published 2025-10-12 · Analyzed
6.4EPSS 0.002
CVE-2025-11633
Tomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation
Published 2025-10-12 · Analyzed
6.3EPSS 0.003
CVE-2025-11639
Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information
Published 2025-10-12 · Analyzed
5.5EPSS 0.002
CVE-2025-11640
Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission
Published 2025-10-12 · Analyzed
5.3EPSS 0.002
CVE-2025-11634
Tomofun Furbo 360/Furbo Mini UART information disclosure
Published 2025-10-12 · Analyzed
4.6EPSS 0.002
CVE-2025-11644
Tomofun Furbo 360/Furbo Mini UART sensitive information
Published 2025-10-12 · Analyzed
4.2EPSS 0.003
CVE-2025-11642
Tomofun Furbo 360/Furbo Mini Registration denial of service
Published 2025-10-12 · Analyzed
4.1EPSS 0.001
CVE-2025-11650
Tomofun Furbo 360/Furbo Mini Password shadow weak hash
Published 2025-10-12 · Analyzed
4.0EPSS 0.002