CVE-2025-61121
High · 7.5CVSS
7.5
EPSS
0.3%
Published
Oct 30, 2025
CISA due date
—
The record
Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage vulnerability. Improper handling of cloud service credentials may allow attackers to obtain them and carry out unauthorized actions, such as sensitive information disclosure and abuse of cloud resources. Successful exploitation could result in privacy breaches and misuse of the platform infrastructure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-54784 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-523
- CVE-2026-8668 A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access… CWE-523
- CVE-2026-36610 Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 transmits DDNS credentials over… CWE-523
- CVE-2026-8673 Unprotected transport of credentials vulnerability in syslink software AG Avantra on… CWE-523
- CVE-2026-23635 Kiteworks is a private data network (PDN). CWE-523
- GHSA-vrjc-q2fh-6x9h Spinnaker vulnerable to SSRF due to improper restrictions on http from user input CWE-523
- CVE-2025-61916 Spinnaker is an open source, multi-cloud continuous delivery platform. CWE-523
- CVE-2025-66029 Open OnDemand provides remote web access to supercomputers. CWE-523