Live › vulnerability › CVE-2026-107016
Fossify v1.3.0 sets insecure permissions on stored data, so an unauthorized attacker can read another user's contacts. The sources do not say whether the attacker needs local access or a network path.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Users of Fossify v1.3.0 whose contacts are stored on the affected device or service. The sources do not say which platform or configuration is exposed.
No product ranges from the sources yet.
1.3.0.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.
This page as .md · .json · in your agent: get_signal("CVE-2026-107016")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.