CVE-2026-107035: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Who could exploit this issue?

An unauthorized attacker could exploit the insecure permissions by supplying a crafted payload. The issue affects another user's private storage.

What could an attacker do if exploitation succeeds?

An attacker could arbitrarily write content into another user's private storage.

Which component and version are identified as affected?

The affected component is object/Page.java in MBasov OMN Outline notes Markdown versionCode 3400.

CVE-2026-107035: Security vulnerability

Event History

Frequently Asked Questions

Who could exploit this issue?

What could an attacker do if exploitation succeeds?

Which component and version are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who could exploit this issue?

What could an attacker do if exploitation succeeds?

Which component and version are identified as affected?