{"id":"CVE-2026-104585","title":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","summary":"Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.","severity":"none","published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T20:17:12.723","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-104585","references":[{"url":"https://github.com/AmalJafarzade/CVE-2026-104585","label":"cve@mitre.org"},{"url":"https://github.com/MobileSecurityFramework/Mobile-Security-Framework-MobSF/blob/master/mobsf/DynamicAnalyzer/views/android/tests_common.py","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"exploits":{"github":1,"githubRepos":["https://github.com/AmalJafarzade/CVE-2026-104585"],"checkedAt":"2026-10-13T20:54:19.417Z"},"exploitAvailable":true,"ingestedAt":"2026-10-13T20:53:44.627Z","slug":"CVE-2026-104585","body":"## Overview\n\nMobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}