Mobatime AMX MTAPI vulnerabilities

Latest Mobatime AMX MTAPI CVEs

Newest publication first

1. CVE-2025-2407 Missing Authentication & Authorization in Web-API allows adversary unrestricted access

   Published 2025-05-27

   Critical·CVSS 9.3 EPSS 0.51%

   Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability is fixed in Version 1.5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.