CVE-2026-107048: Security vulnerability

Published Oct 29, 2026

Updated

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:17 PM

Description

Frequently Asked Questions

Which deployments are identified as affected?

The issue is identified in MotionCreative Motion UI versionCode 101. The provided data does not state whether earlier or later versions are affected.

What does an attacker need to exploit this issue?

An attacker needs to supply a crafted POST request that reaches the application's WebView rendering path. The provided data does not specify required authentication, network access, or user interaction.

How can I determine whether my installation may be affected?

Check whether the installed application reports versionCode 101. No exploitation indicators, logs, or other compromise-detection details are provided.

CVE-2026-107048: Security vulnerability

Event History

Frequently Asked Questions

Which deployments are identified as affected?

What does an attacker need to exploit this issue?

How can I determine whether my installation may be affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are identified as affected?

What does an attacker need to exploit this issue?

How can I determine whether my installation may be affected?