Live › vulnerability › CVE-2026-107020
FeedEx (Handy News Reader) versionCode 116 has an issue in its LoadLinkLaterActivity component on Android. An attacker can make a victim's app fetch a URL the attacker chose.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Users of the FeedEx / Handy News Reader Android app at versionCode 116, where the LoadLinkLaterActivity component can be reached by another app or link. The sources do not say which other conditions are required. Teams that do not ship or use this app can skip it.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a crafted URL.
This page as .md · .json · in your agent: get_signal("CVE-2026-107020")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.