PT-2026-108971
CVE-2026-90983
·
Published
2026-10-09
·
Updated
2026-10-09
Description by
CVSS 3.1
8.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Hayat Mobile versions 3.3.0 through 3.3.x
Description
Hayat Mobile contains a flaw where the use of client-side authentication allows for an authentication bypass. Client-side authentication refers to a security mechanism where the verification of a user's identity is performed on the user's device rather than on a secure server, which can be manipulated by an attacker.
Recommendations
Update Hayat Mobile to version 3.4.0.
Found an issue in the description? Have something to add? Feel free to write us 👾