CVE-2026-107028
CRITICALCVSS 9.1/10EPSS 0.17%
Last modified
CVE-2026-107028 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-107028?
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.
How severe is CVE-2026-107028?
CVE-2026-107028 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-107028?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-107021Insecure permissions in the CardProvider content provider co…
- CVE-2026-107023Insecure permissions in the ContentProvider component of mhs…6.5
- CVE-2026-107024Insecure permissions in Share 2 Archive Today versionCode 61…
- CVE-2026-107025Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (v…
- CVE-2026-107026Insecure permissions in Share to Clipboard v1.14.1 (versionC…7.5
- CVE-2026-107027Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 2…
- CVE-2026-107029Insecure permissions in rubenalfon Pile v1.1.3 allows unauth…
- CVE-2026-10703A security vulnerability has been detected in EIPStackGroup …6.3
- CVE-2026-107030Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (…
- CVE-2026-107032Insecure permissions in Bulk Share : Location Sender v2.1.0 …9.1
- CVE-2026-107033Insecure permissions in the MirakelInternalContentProvider c…
- CVE-2026-107034Insecure permissions in LeafPad / Leaf Note v1.21 (versionCo…9.1
Are you affected by CVE-2026-107028?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST