Live › vulnerability › CVE-2026-107015
Simple Contacts Pro, versionCode 107, has insecure file or data permissions. An unauthorized attacker can read and write notes stored in another user's note database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Users of Simple Contacts Pro versionCode 107 whose notes are stored in the app's note database. The sources do not say which versions are fixed or whether a non-default setting is required.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
This page as .md · .json · in your agent: get_signal("CVE-2026-107015")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.