Live › vulnerability › CVE-2026-107039
NetGuard, a no-root Android firewall app, has insecure permissions on its ActivityMain component in version 2.337 (versionCode 2026080101). The sources say an unauthorized attacker can force a device reset or denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Android devices with the NetGuard no-root firewall app installed, specifically version 2.337 (versionCode 2026080101), where the ActivityMain component is reachable by other apps. The sources do not say whether a fixed version exists or whether the flaw needs a specific setting. Devices without NetGuard are not affected.
No product ranges from the sources yet.
dumpsys package eu.faircode.netguard on the device.2.337 (versionCode 2026080101) is installed.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a device reset or Denial of Service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-107039")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.