CVE Tools
Track your stack

Tomofun

18 CVEs tracked since 2025. Since Oct 2025, none of them reached CISA KEV.

Tomofun CVEs per month

Oct 2025 to Oct 2025. Point at a month, or focus the strip and use the arrow keys.
Tomofun CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-10180

Products

The products that kept showing up in Tomofun's monthly top three, with their CVEs summed over those months.

  1. Furbo 360171 month
  2. Furbo Mini141 month
  3. Furbo Mobile App11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Tomofun.

  1. CVE-2025-11650Tomofun Furbo 360/Furbo Mini Password shadow weak hash1.8
  2. CVE-2025-11649Tomofun Furbo 360/Furbo Mini Root Account hard-coded password7.0
  3. CVE-2025-11648Tomofun Furbo 360/Furbo Mini GATT Interface URL TF_FQDN.json server-side request forgery5.6
  4. CVE-2025-11647Tomofun Furbo 360/Furbo Mini GATT Service information disclosure3.1
  5. CVE-2025-11646Tomofun Furbo 360/Furbo Mini GATT Service access control6.3
  6. CVE-2025-11645Tomofun Furbo Mobile App Authentication Token sensitive information2.4
  7. CVE-2025-11644Tomofun Furbo 360/Furbo Mini UART sensitive information2.0
  8. CVE-2025-11643Tomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials3.7
  9. CVE-2025-11642Tomofun Furbo 360/Furbo Mini Registration denial of service4.0
  10. CVE-2025-11641Tomofun Furbo 360/Furbo Mini Trial Restriction access control3.9
  11. CVE-2025-11640Tomofun Furbo 360/Furbo Mini Bluetooth Low Energy cleartext transmission3.1
  12. CVE-2025-11639Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information3.3
  13. CVE-2025-11638Tomofun Furbo 360/Furbo Mini Bluetooth denial of service4.3
  14. CVE-2025-11637Tomofun Furbo 360 Audio race condition4.3
  15. CVE-2025-11636Tomofun Furbo 360 Account server-side request forgery5.6

The record

Peak rank
#60 in Oct 2025
Busiest month shown
Oct 2025, 18 CVEs
Months with a KEV entry
0 since Oct 2025
Monthly snapshots
1 since 2025
Tomofun's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store