Live › vulnerability › CVE-2026-107038
Yet Another UPnP Controller (Android app, versionCode 50200) exposes an exported component without proper permissions. An unauthorized attacker can invoke it to access arbitrary application data and control it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users of the Yet Another UPnP Controller app at versionCode 50200, the affected build named in the NVD entry. The sources do not say whether other versions are affected or whether any configuration changes exposure.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.
This page as .md · .json · in your agent: get_signal("CVE-2026-107038")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.