Vulnerability in Kidsview application

CERT Polska has received a report about vulnerability in Kidsview application and participated in coordination of its disclosure.

The vulnerabilityCVE-2026-8990: A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with application's push notification.

This issue was fixed in version 4.4.3

We thank Jakub Lewandowski for the responsible vulnerability report.