CVE-2026-107030: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Which release is identified as affected?

The affected release is craftxbox YubiClip XOR fork v1.0.1, with versionCode 10003. No other versions are identified in the available data.

What access does an attacker need?

The issue is described as exploitable by unauthorized attackers. The available data does not specify whether local device access, another installed application, or any particular Android permission is required.

CVE-2026-107030: Security vulnerability

Event History

Frequently Asked Questions

Which release is identified as affected?

What access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which release is identified as affected?

What access does an attacker need?