CVE-2025-11598

The record

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended (reopening the app would require the user to log in). The data exposed depends on the last application view displayed before the application was minimized This issue was fixed in version 4.71.0

Affected packages

Related vulnerabilities

• CVE-2026-73008 Exposure of private personal information to an unauthorized actor in Windows Biometric… CWE-359
• CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability which could… CWE-359
• CVE-2026-74966 Information disclosure in the Form Autofill component. CWE-359
• CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code… CWE-359
• CVE-2026-55496 Cloudreve is a self-hosted file management and sharing system. CWE-359
• CVE-2026-58297 Exposure of private personal information to an unauthorized actor in Microsoft Edge for… CWE-359
• CVE-2026-58296 Exposure of private personal information to an unauthorized actor in Microsoft Edge for… CWE-359
• CVE-2026-48615 A flaw in Node.js proxy tunnel error handling could expose proxy credentials in… CWE-359