CVE-2026-47782

Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.

• CWE-357

• https://jvn.jp/en/vu/JVNVU93461473/
• https://play.google.com/store/apps/details?id=com.siber.roboform
• https://www.roboform.com/news-android

Published

May 20, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47774Envoy is an open source edge and service proxy designed for …7.5
• CVE-2026-47775Envoy is an open source edge and service proxy designed for …6.8
• CVE-2026-47777Mastodon is a free, open-source social network server based …7.5
• CVE-2026-47778Envoy is an open source edge and service proxy designed for …4.4
• CVE-2026-4778A weakness has been identified in SourceCodester Sales and I…6.5
• CVE-2026-47781PDM is a Python package and dependency manager. In versions …8.4
• CVE-2026-47783In memcached before 1.6.42, username data for SASL password …8.1
• CVE-2026-47784In memcached before 1.6.42, password data for SASL password …8.1
• CVE-2026-4779A security vulnerability has been detected in SourceCodester…8.8
• CVE-2026-4780A vulnerability was detected in SourceCodester Sales and Inv…8.8
• CVE-2026-4781A flaw has been found in SourceCodester Sales and Inventory …8.8
• CVE-2026-4782The Avada Builder plugin for WordPress is vulnerable to Arbi…6.5