CVE Watch29 oct 2026

CVE-2026-107056

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 29 oct 2026 · Última mod.: 29 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.

Referencias oficiales

codeberg.orghttps://codeberg.org/OpenTracksApp/OpenTracks
f-droid.orghttps://f-droid.org/packages/de.dennisguse.opentracks/
github.comhttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107056.md

CVEs relacionados

Sin CVEs relacionados por CWE o producto.