216.73.216.226

CVE-2025-10716

· Published 19/09/2025 15:15 · Modified 19/09/2025 17:15

Labels: CVE-2025-10716 2025-09-19CVE-2025-10716CWE-926[email protected]

Essential information

Published
19/09/2025 15:15
Modified
19/09/2025 17:15
Author
—
Creator
—
CVSS
4.8 MEDIUM (v3) 4.8 MEDIUM (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

A flaw has been found in Creality Cloud App up to 6.1.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cxsw.sdprinter. Executing manipulation can lead to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD status

Status
Awaiting Analysis — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
creality / creality cloud app cpe:2.3:a:creality:creality_cloud_app:*:*:*:*:*:android:*:*
creality / creality cloud app cpe:2.3:a:creality:creality_cloud_app:<6.1.0:*:*:*:*:android:*:*

References