CWE-926

CWE-926 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-926, highest CVSS first.

  1. CRITICAL 9.1CVE-2026-107032public PoC2026-10-29

    Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-1133852026-10-20

    A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android application components…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-211272026-10-12

    Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.

    AI risk analysis on Exploit-DB.ai →