CVE-2026-106713: Security vulnerability

Published Nov 5, 2026

Updated

An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity component

Event History

Nov 5, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:17 PM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue is described as remotely exploitable, so the available data does not indicate that the attacker needs local device access. No further prerequisites are provided.

Which component should be investigated during triage?

Investigate the com.dramawave.feature.web.WebPageActivity component in FreeReels for Android version 2.3.11, as it is identified as the affected component.

What information could be exposed?

The available description states that sensitive information may be obtained, but it does not identify the specific data types that can be disclosed.

CVE-2026-106713: Security vulnerability

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which component should be investigated during triage?

What information could be exposed?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which component should be investigated during triage?

What information could be exposed?