VULNERABILITY INTELLIGENCE

CVE-2025-11635

CVSS score4.3 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-10-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

A weakness has been identified in Tomofun Furbo 360 up to FB0035_FW_036. This vulnerability affects unknown code of the component File Upload. This manipulation causes resource consumption. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness classification

  • cna@vuldb.com: CWE-400
  • nvd@nist.gov: CWE-400

Primary references