CVE-2020-8988: Voatz

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers (after using root access to make a copy of the local database) to discover login credentials and voting history via an offline brute-force approach.

Affected products

• Voatz Voatz: version 2020-01-01 only

Published 2020-02-13. Last modified 2026-06-17.