CyberSecBulletin

CFMOTO vulnerabilities

We track 1 vulnerability in CFMOTO products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2025.

1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score

Latest CFMOTO vulnerabilities

  • 8.5 High severity

    RIDE: Authorization Bypass Through User-Controlled Key

    CVE-2025-11690CFMOTO

    An Insecure Direct Object Reference (IDOR) vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles. Exploiting this issue enables an attacker to retrieve data such as GPS coordinates, encr