PT-2025-41726 · Tomofun · Furbo Mini+1

Calvin Star + 2 · Published 2025-10-12 · Updated 2025-10-12 · CVE-2025-11638

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074

Description A flaw exists in the Bluetooth Handler component of Tomofun Furbo 360 and Furbo Mini. Exploitation of this issue can lead to a denial of service. An attacker must be present on the local network to carry out the manipulation.

Recommendations Update Furbo 360 to a version later than FB0035 FW 036. Update Furbo Mini to a version later than MC0020 FW 074.

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-11638

Affected Products

Furbo 360

Furbo Mini

References · 9

• https://osv.dev/vulnerability/CVE-2025-11638 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11638 · Security Note
• https://twitter.com/CVEnew/status/1977426103653531869 · Twitter Post
• https://t.me/CVEtracker/34717 · Telegram Post
• https://vuldb.com/?id.328049 · Note
• https://t.me/cveNotify/138388 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1977426644995363029 · Twitter Post
• https://vuldb.com/?ctiid.328049 · Note
• https://vuldb.com/?submit.661363 · Note