CVE-2026-107044: High severity vulnerability
Published Oct 29, 2026
·Updated
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.
Event History
Oct 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Installations of ProjectMAXS MAXS Main v0.5.19 with versionCode 19 are identified as affected. The provided data does not identify other affected versions.
2
What does an attacker need to exploit it?
The attack vector is network-based, requires low attack complexity, and does not require privileges or user interaction. An unauthenticated attacker could manipulate the app's MAXS command/transport mechanism.
3
How can I determine whether an installation is affected?
Check the installed MAXS Main version and versionCode. An installation reporting v0.5.19 and versionCode 19 is affected according to the provided information.