PT-2025-44419 · Talktalk · Talktalk

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-61113

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TalkTalk version 3.3.6

Description The TalkTalk 3.3.6 Android App has improper access control issues in several API endpoints. Modifying request parameters can allow attackers to get sensitive user information, like device identifiers and birthdays, and access private group information, including join credentials. Exploitation could lead to privacy breaches and unauthorized access to restricted resources. The vulnerable parameters are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-61113

Affected Products

Talktalk

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-61113 · Security Note
• https://kar1oz.notion.site/TalkTalk-2619a473ecb28072b600dfcc7791c9d2 · Note
• https://t.me/CVEtracker/36202 · Telegram Post
• https://twitter.com/CVEnew/status/1983925239173017724 · Twitter Post