Furbo Furbo Mini Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Furbo Furbo Mini Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2025-11649 — CVSS 7.0 (high): A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Root Account…
• CVE-2025-11646 — CVSS 6.3 (medium): A vulnerability was detected in Tomofun Furbo 360 and Furbo Mini. This vulnerability affects unknown code of the component GATT Service…
• CVE-2025-11648 — CVSS 5.6 (medium): A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. Impacted is an unknown function of the file TF_FQDN.json of the…
• CVE-2025-11638 — CVSS 4.3 (medium): A flaw has been found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the component Bluetooth Handler…
• CVE-2025-11642 — CVSS 4.0 (medium): A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected is an unknown function of the component Registration Handler…
• CVE-2025-11641 — CVSS 3.9 (low): A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. This impacts an unknown function of the component Trial Restriction…
• CVE-2025-11633 — CVSS 3.7 (low): A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function upload_file_to_s3 of the file…
• CVE-2025-11643 — CVSS 3.7 (low): A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown functionality of the…
• CVE-2025-11639 — CVSS 3.3 (low): A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file collect_logs.sh…
• CVE-2025-11640 — CVSS 3.1 (low): A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. This affects an unknown function of the component Bluetooth Low Energy. The…
• CVE-2025-11647 — CVSS 3.1 (low): A flaw has been found in Tomofun Furbo 360 and Furbo Mini. This issue affects some unknown processing of the component GATT Service. This…
• CVE-2025-11634 — CVSS 2.4 (low): A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. This affects an unknown part of the component UART Interface. The…
• CVE-2025-11644 — CVSS 2.0 (low): A weakness has been identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is some unknown functionality of the component…
• CVE-2025-11650 — CVSS 1.8 (low): A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the file /etc/shadow of…