CVE-2026-107038: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Who can exploit this issue?

Unauthorized attackers who can invoke the affected application's exported component may exploit the insecure permissions to access and control application data.

What access does an attacker need?

The attacker needs the ability to invoke an exported component of Yet Another UPnP Controller. The provided information does not state that authentication, user interaction, or a particular network position is required.

What is the potential impact?

Successful exploitation can lead to arbitrary access to application data and control over that data.

CVE-2026-107038: Security vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What access does an attacker need?

What is the potential impact?