{"id":"CVE-2026-107026","kind":"vulnerability","aliases":["CVE-2026-107026"],"related":[],"title":"Share to Clipboard Android app lets attackers overwrite another app's clipboard","description":"Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.","summary":"Share to Clipboard v1.14.1 (versionCode 32) has insecure permissions that let an unauthorized attacker overwrite clipboard content belonging to another user. The impact is limited to replacing what is copied, which could mislead a user into pasting attacker-chosen text.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","other","share-to-clipboard"],"not_affected_if":["other-version"],"how_to_check":"- Check the installed Share to Clipboard version in the app's settings or package details; unknown whether the sources give an exact check command.","fix":null,"status":"open","published_at":"2026-10-29T16:17:48+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","triaged_at":"2026-10-29T16:33:33+00:00","updated_at":"2026-10-29T16:33:33+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-29T16:33:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Share to Clipboard Android app lets attackers overwrite another app's clipboard","impact":"low","summary":"Share to Clipboard v1.14.1 (versionCode 32) has insecure permissions that let an unauthorized attacker overwrite clipboard content belonging to another user. The impact is limited to replacing what is copied, which could mislead a user into pasting attacker-chosen text.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","share-to-clipboard"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker replaces clipboard content, possibly tricking pasted text","analyst_note":"Confirm the affected app platform, the exact permission flaw and whether a fixed version exists at the NVD entry.","how_to_check":"- Check the installed Share to Clipboard version in the app's settings or package details; unknown whether the sources give an exact check command.","plain_action":"","needs_analyst":true,"not_affected_if":["other-version"],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000622,"input_tokens":4090,"output_tokens":426,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107026':15A,18A '-2026':14A,17A '32':30B,74C 'allow':75C 'android':4A,19B 'anoth':9A,44B,81C 'app':5A,10A 'arbitrarili':79C 'attack':7A,38B,63B,77C 'attacker-chosen':62B 'belong':42B 'chosen':64B 'clipboard':3A,12A,24B,27B,40B,71C,84C 'content':41B,85C 'copi':54B 'could':56B 'cve':13A,16A 'impact':47B 'insecur':32B,66C 'let':6A,35B 'limit':49B 'mislead':57B 'overwrit':8A,39B,80C 'past':61B 'permiss':33B,67C 'replac':51B 'share':1A,22B,25B,69C 'share-to-clipboard':21B 'text':65B 'unauthor':37B,76C 'user':45B,59B,82C 'v1.14.1':28B,72C 'versioncod':29B,73C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T16:17:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107026","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107026","severity":null,"published_at":"2026-10-29T16:17:48+00:00","modified_at":"2026-10-29T16:17:48+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","fetched_at":"2026-10-29T16:25:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}