Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Vulnerabilities CVE-2025-3646

CVE-2025-3646

Medium
Open
TLP:CLEAR

Petlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share API

AI Analysis

No AI analysis yet.

Description

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unauthorized users to add users as shared owners to any device by exploiting missing permission checks. Attackers can send requests to the device share API to gain unauthorized access to devices and view owner information without proper authorization validation.

Details

CVSS Score
6.9
EPSS Score
0.20%

9.9th percentile

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Confidence
90%
Published
Jan 3, 2026
Last Modified
Jul 20, 2026
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.