CVE Tools

Tomofun

18 CVEs tracked since 2025. Since Oct 2025, none of them reached CISA KEV.

Tomofun CVEs per month

Oct 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Tomofun CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-10180
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Tomofun's monthly top three, with their CVEs summed over those months.

  1. Furbo 360171 month
  2. Furbo Mini141 month
  3. Furbo Mobile App11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Tomofun.

  1. CVE-2025-11650Tomofun Furbo 360/Furbo Mini Password shadow weak hash1.8
  2. CVE-2025-11649Tomofun Furbo 360/Furbo Mini Root Account hard-coded password7.0
  3. CVE-2025-11648Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery5.6
  4. CVE-2025-11647Tomofun Furbo 360/Furbo Mini GATT Service information disclosure3.1
  5. CVE-2025-11646Tomofun Furbo 360/Furbo Mini GATT Service access control6.3
  6. CVE-2025-11645Tomofun Furbo Mobile App Authentication Token sensitive information2.4
  7. CVE-2025-11644Tomofun Furbo 360/Furbo Mini UART sensitive information2.0
  8. CVE-2025-11643Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials3.7
  9. CVE-2025-11642Tomofun Furbo 360/Furbo Mini Registration denial of service4.0
  10. CVE-2025-11641Tomofun Furbo 360/Furbo Mini Trial Restriction access control3.9
  11. CVE-2025-11640Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission3.1
  12. CVE-2025-11639Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information3.3
  13. CVE-2025-11638Tomofun Furbo 360/Furbo Mini Bluetooth denial of service4.3
  14. CVE-2025-11637Tomofun Furbo 360 Audio race condition4.3
  15. CVE-2025-11636Tomofun Furbo 360 Account server-side request forgery5.6

The record

Peak rank
#60 in Oct 2025
Busiest month shown
Oct 2025, 18 CVEs
Months with a KEV entry
0 since Oct 2025
Monthly snapshots
1 since 2025
Tomofun's full record, month by month