PT-2026-43394 · Unknown · Applockz App Lock/Fingerprint Lock

Published 2026-05-26 · Updated 2026-05-27 · CVE-2025-68711

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AppLockZ App Lock and Fingerprint Lock version 4.2.11

Description A local attacker with physical access can bypass the PIN lock because the lock is implemented as an overlay instead of using Android's secure authentication APIs. By navigating cascading interface flows through exposed routes via advertisement or browser intents, an attacker can evade lockscreen verification to access protected applications, leading to privilege escalation and information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-68711

Affected Products

Applockz App Lock/Fingerprint Lock

References · 6

• 🔥 https://github.com/actuator/applock.passwordfingerprint.applockz/blob/main/CVE-2025-68711 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-68711 · Security Note
• https://t.me/cveNotify/164939 · Telegram Post
• https://t.me/cveNotify/164918 · Telegram Post
• https://play.google.com/store/apps/details?id=applock.passwordfingerprint.applockz · Note
• https://github.com/actuator/applock.passwordfingerprint.applockz · Note