Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2025-32898

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

  • Published: Dec 5, 2025
  • Updated: Dec 6, 2025
  • CVE: CVE-2025-32898
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

CWEs:

No affected software listed.