CVE-2026-107015
critical · 9.1Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
9.1
CVSS
0.5%
EPSS (exploit prob.)
43rd
EPSS percentile
2026-10-29
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-284
References
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md
- https://github.com/SimpleMobileTools/Simple-Contacts
- https://github.com/kanytu/Simple-Contacts/issues/628
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-107015