CVE-2026-107032: Critical severity vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Any unauthorized attacker who can reach the app's exported component may exploit it. The vector is network-based and requires no privileges or user interaction.

What is the potential impact?

Successful exploitation can provide arbitrary access to data and allow control over data flow. The reported impact includes high confidentiality and integrity impact, with no availability impact indicated.

Which app version is identified as affected?

The affected version identified is Bulk Share : Location Sender v2.1.0, versionCode 5.

CVE-2026-107032: Critical severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which app version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact?

Which app version is identified as affected?