PT-2026-36641 · Codewise · Tornet Scooter Mobile App

Caginkyr · Published 2026-05-02 · Updated 2026-05-03 · CVE-2026-7671

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CodeWise Tornet Scooter Mobile App version 4.75

Description An issue exists in an unknown function within the /TwoFactor file that allows for improper restriction of excessive authentication attempts. This flaw can be exploited remotely, although the attack is considered highly complex and difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-799

CWE-307

Related Identifiers

CVE-2026-7671

Affected Products

Tornet Scooter Mobile App

References · 10

• 🔥 https://drive.proton.me/urls/M0WFM4137W#MY0jA6pjHYPO · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7671 · Security Note
• https://vuldb.com/vuln/360819/cti · Note
• https://vuldb.com/vuln/360819 · Note
• https://twitter.com/CVEarity/status/2050828664787648570 · Twitter Post
• https://t.me/CVEtracker/52548 · Telegram Post
• https://t.me/cveNotify/161896 · Telegram Post
• https://twitter.com/CVEnew/status/2050729190966608004 · Twitter Post
• https://twitter.com/infoflowcloud/status/2050729778957705380 · Twitter Post
• https://vuldb.com/submit/799987 · Note