Live › vulnerability › CVE-2026-107043
Code Catcher versionCode 131 has insecure permissions that let an unauthorized attacker change how the app captures SMS codes. The description does not say what an attacker can read or send once the capture is manipulated.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Only installs of the Code Catcher app at versionCode 131 are described; the sources do not say how the app is distributed or who runs it. unknown
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.
This page as .md · .json · in your agent: get_signal("CVE-2026-107043")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.