CVE-2026-107038: vulnerability facts

CVE-2026-107038

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

EPSS 0.2%

Published: 2026-10-29T00:00:00.000Z
Updated: 2026-10-29T15:41:06.907Z

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published

Original sources

https://f-droid.org/packages/de.yaacc/
https://github.com/cbejr/yaacc
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107038.md
https://nvd.nist.gov/vuln/detail/CVE-2026-107038

Check your server →

CVE-2026-107038

Affected products and versions

n/a

Original sources