Live › vulnerability › CVE-2026-107033
The MirakelInternalContentProvider component in Mirakel v3.0 (versionCode 60) has insecure permissions. An unauthorized attacker can read and modify another user's task database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users of the Mirakel task app version 3.0 (versionCode 60) on Android are affected, since the flaw is in an exported internal content provider. The sources do not say whether other versions are affected or what configuration is needed to reach the provider.
No product ranges from the sources yet.
versionCode 60 or v3.0No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.
This page as .md · .json · in your agent: get_signal("CVE-2026-107033")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.