CVE-2025-63435

The Xtooltech Xtool AnyScan Android Application version 4.40.40 is vulnerable to Missing Authentication for Critical Function (CWE-306). The root cause is a server-side endpoint responsible for serving update packages that does not require any authentication. This flaw allows an unauthenticated r...