PT-2026-5872 · Mobywatel · Mobywatel

Published 2026-02-03 · Updated 2026-02-03 · CVE-2025-11598

Positive Technologies (AI Summary)

CVSS v4.0

1.0

Low

Base vector

AV:P/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions mObywatel versions prior to 4.71.0

Description An unauthorized user can view an account owner's personal information in the minimized application window using the App Switcher, even after the login session has ended. Reopening the application requires the user to log in again. The data exposed depends on the last application view displayed before minimization.

Recommendations Update to version 4.71.0 or later.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2025-11598

Affected Products

Mobywatel

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11598 · Security Note
• https://t.me/cveNotify/150715 · Telegram Post
• https://cert.pl/posts/2026/02/CVE-2025-11598 · Note
• https://info.mobywatel.gov.pl · Note