---
id: "CVE-2026-107036"
kind: "vulnerability"
aliases: ["CVE-2026-107036"]
title: "Mission Control (AIMSICD) Android app: exported component lets attackers invoke blocker"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["aimsicd", "android", "mission-control", "other"]
not_affected_if: []
published_at: "2026-10-29T16:17:49+00:00"
first_seen_at: "2026-10-29T16:25:55+00:00"
updated_at: "2026-10-29T16:33:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107036", "first_seen_at": "2026-10-29T16:25:55+00:00"}]
---

# Mission Control (AIMSICD) Android app: exported component lets attackers invoke blocker

Mission Control (AIMSICD), an Android app, exposes an exported component that an unauthorized attacker can invoke, affecting its tracker blocker mechanism. The sources do not say what the attacker can do beyond invoking that component.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-29T16:25:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107036

## From the sources

Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_