Live › vulnerability › CVE-2026-107028
The wbpxre150 Shopping List app version 11.0 (versionCode 11) exports a component without proper permission checks. An attacker with access to the device can invoke that component and manipulate the shopping-list data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users of the wbpxre150 Shopping List Android app version 11.0 (versionCode 11). The sources do not say whether other versions are affected or whether a remote attacker can reach the exported component, only that unauthorized attackers can invoke it.
No product ranges from the sources yet.
11.0 (versionCode 11) in the app's settings or package details.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.
This page as .md · .json · in your agent: get_signal("CVE-2026-107028")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.