CVE-2026-107027
Unknown
Last modified
CVE-2026-107027 is a vulnerability of currently unknown severity. Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting..
Description
Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-107027?
Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.
How severe is CVE-2026-107027?
Severity scoring for CVE-2026-107027 is pending analysis.
How do I fix CVE-2026-107027?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-107020An issue in the activity.LoadLinkLaterActivity component of …7.5
- CVE-2026-107021Insecure permissions in the CardProvider content provider co…
- CVE-2026-107023Insecure permissions in the ContentProvider component of mhs…6.5
- CVE-2026-107024Insecure permissions in Share 2 Archive Today versionCode 61…
- CVE-2026-107025Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (v…
- CVE-2026-107026Insecure permissions in Share to Clipboard v1.14.1 (versionC…7.5
- CVE-2026-107028Insecure permissions in wbpxre150 Shopping List v11.0 (versi…9.1
- CVE-2026-107029Insecure permissions in rubenalfon Pile v1.1.3 allows unauth…
- CVE-2026-10703A security vulnerability has been detected in EIPStackGroup …6.3
- CVE-2026-107030Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (…
- CVE-2026-107032Insecure permissions in Bulk Share : Location Sender v2.1.0 …9.1
- CVE-2026-107033Insecure permissions in the MirakelInternalContentProvider c…
Are you affected by CVE-2026-107027?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST