CVE-2025-3653CRITICAL 7.3EPSS p12.6%

CVE-2025-3653CVE-2025-3653

petlibro / petlibro

Description

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device control APIs to change feeding schedules, trigger manual feeds, access camera feeds, and modify device settings without authorization checks.

Scoring

CVSS 3.17.3 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS0.22% probability of exploitation · percentile 12.6% · 2026-08-02T12:03:13Z
Published2026-01-04
Last modified2026-07-20

Underlying weaknesses· 1

CWE-612

References

  1. https://bobdahacker.com/blog/petlibro
  2. https://www.vulncheck.com/advisories/petlibro-smart-pet-feeder-through-platform-improper-access-control-via-api-endpoint

1

TypeTargetConfidenceTier
WeaknessImproper Authorization of Index Containing Sensitive Informationcwe-6120%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-3654
CVE
CVE-2025-3646
CVE
CVE-2025-3660
CVE
CVE-2025-15115
CVE
CVE-2025-52665
CVE
CVE-2026-24790
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.