Live › vulnerability › CVE-2026-107032
Bulk Share: Location Sender version 2.1.0 (versionCode 5), an Android app, exposes a component to other apps without proper permission checks. An unauthorized attacker can invoke it to access data and control data flow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users who have Bulk Share: Location Sender version 2.1.0 (versionCode 5) installed on an Android device are the ones described. The sources do not describe server-side or other configurations. Anyone running a different version or without this app can skip it.
No product ranges from the sources yet.
2.1.0 with versionCode 5No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
This page as .md · .json · in your agent: get_signal("CVE-2026-107032")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.