CVE-2026-107015EUVD-2026-112928GHSA-6CF3-9PPW-9W2C
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note dat
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
CISA SSVC
- Exploitation: poc
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
Simple Contacts Pro, an Android contacts app, is affected by this vulnerability. An attacker without authorization could read and modify notes stored in another user's note database because of improperly configured file permissions.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
No affected packages have been listed by the sources.