CVE-2026-107051: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation control configurations.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:17 PM

Description

Frequently Asked Questions

How can I determine whether an installation is within the confirmed affected scope?

The verified affected build is AndFHEM v2.4.1 with versionCode 241. The provided data does not identify any other affected or fixed versions.

What level of attacker access is described?

The issue is described as exploitable by unauthorized attackers. The provided data does not specify the required access path, such as local device access, network access, or a particular application component.

CVE-2026-107051: Security vulnerability

Event History

Frequently Asked Questions

How can I determine whether an installation is within the confirmed affected scope?

What level of attacker access is described?

Company

Resources

Contact

Frequently Asked Questions

How can I determine whether an installation is within the confirmed affected scope?

What level of attacker access is described?