{"id":"CVE-2026-107036","kind":"vulnerability","aliases":["CVE-2026-107036"],"related":[],"title":"Mission Control (AIMSICD) Android app: exported component lets attackers invoke blocker","description":"Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.","summary":"Mission Control (AIMSICD), an Android app, exposes an exported component that an unauthorized attacker can invoke, affecting its tracker blocker mechanism. The sources do not say what the attacker can do beyond invoking that component.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aimsicd","android","mission-control","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-29T16:17:49+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","triaged_at":"2026-10-29T16:33:25+00:00","updated_at":"2026-10-29T16:33:25+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-10-29T16:33:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Mission Control (AIMSICD) Android app: exported component lets attackers invoke blocker","impact":"low","summary":"Mission Control (AIMSICD), an Android app, exposes an exported component that an unauthorized attacker can invoke, affecting its tracker blocker mechanism. The sources do not say what the attacker can do beyond invoking that component.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","mission-control","aimsicd"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-107036 and the upstream AIMSICD project for the affected component, required privileges, and whether a fixed versionCode exists.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Only installs of Mission Control / AIMSICD with versionCode 2026080501 are described as affected; the sources do not say which configurations or data paths are exposed. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000633,"input_tokens":4093,"output_tokens":448,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107036':14A,17A '-2026':13A,16A '2026080501':65C 'affect':39B 'aimsicd':3A,18B,25B,63C 'allow':66C 'android':4A,19B,27B 'app':5A,28B 'applic':81C 'attack':9A,36B,51B,68C 'beyond':54B 'blocker':11A,42B,77C 'compon':7A,32B,57B,73C 'control':2A,22B,24B,62C 'cve':12A,15A 'export':6A,31B,72C 'expos':29B 'impact':74C 'insecur':58C 'invok':10A,38B,55B,70C 'let':8A 'mechan':43B,78C 'mission':1A,21B,23B,61C 'mission-control':20B 'permiss':59C 'say':48B 'sourc':45B 'tracker':41B,76C 'unauthor':35B,67C 'versioncod':64C","nicknames":[],"mitigations":[],"who_affected":"Only installs of Mission Control / AIMSICD with versionCode 2026080501 are described as affected; the sources do not say which configurations or data paths are exposed. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T16:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107036","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107036","severity":null,"published_at":"2026-10-29T16:17:49+00:00","modified_at":"2026-10-29T16:17:49+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","fetched_at":"2026-10-29T16:25:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}