Search/CVE-2026-8990
● CVE

CVE-2026-8990

DiscoveredMay 28, 2026UpdatedOct 26, 2026

A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification. This issue was fixed in version 4.4.3

CVSS v3.1
—
EPSS
0.21%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 25, 2026 → Oct 26, 2026
▼ 0.08pp
0.28% → 0.21% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
May 28, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 26, 2026