CVE-2026-15365
Received Received - Intake

Kids Mode Password Bypass via Quick Apps

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: Vivo Mobile Communication Co., Ltd.

Description
A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password verification and use Quick Apps outside the app.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-15365
EUVD
EUVD-2026-66295

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vivo kids_mode *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-841 The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a pop-up logic flaw in Kids Mode that lets users bypass password verification and access Quick Apps outside the intended app environment.

Impact Analysis

It may allow unauthorized access to restricted features or apps, potentially exposing sensitive data or enabling unintended actions by bypassing child protection controls.

Mitigation Strategies

Update the Kids Mode app to the latest version to patch the pop-up logic flaw. Disable Quick Apps access outside the app if possible. Monitor app behavior for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-15365. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart