Vulnerability Description
Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.
References
- https://f-droid.org/packages/de.yaacc/
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026
- https://github.com/cbejr/yaacc
FAQ
What is CVE-2026-107038?
CVE-2026-107038 is a documented vulnerability. Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.
How severe is CVE-2026-107038?
CVSS scoring is not yet available for CVE-2026-107038. Check NVD for updates.
Is there a patch for CVE-2026-107038?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.