PT-2025-33631 · 1&1 · Mail.Com App+1

Fxizenta · Published 2025-08-18 · Updated 2025-08-18 · CVE-2025-9102

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: 1&1 Mail & Media mail.com App version 8.8.0

Description: A security vulnerability has been detected due to improper export of Android application components. The issue affects an unknown function within the AndroidManifest.xml file of the com.mail.mobile.android.mail component. The attack can be launched on the local host. The exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9102

Affected Products

1&1 Mail & Media

Mail.Com App

References · 10

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9102 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9102 · Vendor Advisory
• https://vuldb.com/?submit.628264 · Note
• https://t.me/cveNotify/132612 · Telegram Post
• https://vuldb.com/?ctiid.320424 · Note
• https://vuldb.com/?id.320424 · Note
• https://t.me/CVEtracker/30255 · Telegram Post
• https://t.me/cveNotify/132642 · Telegram Post