CVE-2025-8393 – “Fortnite Phone TLS Accepts Self-Signed Certificates”

CVE ID : CVE-2025-8393

Published : Aug. 8, 2025, 5:15 p.m. | 15 minutes ago

Description : A TLS vulnerability exists in the phone application used to manage a
connected device. The phone application accepts self-signed certificates
when establishing TLS communication which may result in
man-in-the-middle attacks on untrusted networks. Captured communications
may include user credentials and sensitive session tokens.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…