MEDIUM SeverityCVSS 4.06.3CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
CVE-2026-7671
Last updated May 02, 2026 · Published May 02, 2026
Description
A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the file /TwoFactor. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
1 listed- CodeWise:Tornet Scooter Mobile App
Mappings
CWE
CWE-307CWE-799
CAPEC
None listed.
Related
Guides
CVE® content © MITRE Corporation. Licensed under the CVE Terms of Use. Terms