Pop-up Logic Flaw in Vivo's Kids Mode Allows Unauthorized Access
CVE-2026-15365

2.4LOW

Key Information:

Vendor

Vivo

Status
Kids Mode
Vendor
CVE Published:
26 August 2026

What is CVE-2026-15365?

A logic flaw has been identified in Vivo's Kids Mode feature, which permits users to circumvent password verification. This issue allows unauthorized access to Quick Apps outside the intended restrictions, potentially exposing sensitive functionalities to unverified users. The vulnerability raises significant security concerns regarding user data protection and the integrity of the application.

Affected Version(s)

Kids Mode Versions below 4.9.7.1

References

https://www.vivo.com/en/support/security-advisory-detail?...

CVSS V4

Score:
2.4
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.