CVE-2022-0732: 1byte COPY9

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.

Affected products

• 1byte COPY9: affected versions not specified
• 1byte Exactspy: affected versions not specified
• 1byte Fonetracker: affected versions not specified
• 1byte Guestspy: affected versions not specified
• 1byte Ispyoo: affected versions not specified
• 1byte Mxspy: affected versions not specified
• 1byte Secondclone: affected versions not specified
• 1byte The Truth Spy: affected versions not specified
• 1byte Thespyapp: affected versions not specified

Published 2022-02-24. Last modified 2026-06-17.