Xplora X4
Confirmed mnemonic disclosure, Oct 2020; vendor patched · since 2026-11-05
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Children's smartwatch. mnemonic (2020) found a remotely activatable 'Persistent Connection Service' from Qihoo 360 in the firmware that could capture location, audio and photos via SMS commands.
Identity
- Brand
- Xplora
- Model
- X4
- Made in
- CN (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| model_number | X4, XPLORAX4 |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcpThen ask: “Run a Trust Check on my Xplora X4.” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Preinstalled malware | high | 1 | 1 |
| Undisclosed radio | low | 1 | 1 |
Published sources
- Backdoor in kids' smartwatch makes it a remote surveillance device · mnemonic · 2020-10-12
Reports · 1
- Suspicious verified Firmware contained a dormant Qihoo 360 service able to take photos, record audio and report location on receipt of encrypted SMS commands; vendor removed it in an update
firmware_dump · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/xplora-x4"><img src="https://isitspying.com/badge/xplora-x4.svg"></a>
JSON: /api/products/xplora-x4 · or request this page with Accept: application/json.