{"id":"CVE-2026-107043","kind":"vulnerability","aliases":["CVE-2026-107043"],"related":[],"title":"Code Catcher app: insecure permissions let attackers manipulate SMS code capture","description":"Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's SMS-code-capture mechanism.","summary":"Code Catcher versionCode 131 has insecure permissions that let an unauthorized attacker change how the app captures SMS codes. The description does not say what an attacker can read or send once the capture is manipulated.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","code-catcher","other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-29T17:17:56+00:00","first_seen_at":"2026-10-29T17:26:16+00:00","triaged_at":"2026-10-29T17:28:14+00:00","updated_at":"2026-10-29T17:28:14+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-10-29T17:28:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Code Catcher app: insecure permissions let attackers manipulate SMS code capture","impact":"medium","summary":"Code Catcher versionCode 131 has insecure permissions that let an unauthorized attacker change how the app captures SMS codes. The description does not say what an attacker can read or send once the capture is manipulated.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","code-catcher"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker manipulates the app's SMS code capture mechanism","analyst_note":"Check the NVD entry and any vendor or app-store page for Code Catcher to confirm the affected component, attack path, and whether a fixed versionCode exists.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Only installs of the Code Catcher app at versionCode 131 are described; the sources do not say how the app is distributed or who runs it. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000615,"input_tokens":4082,"output_tokens":414,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107043':14A,17A '-2026':13A,16A '131':25B,64C 'allow':65C 'android':18B 'app':3A,37B,72C 'arbitrarili':69C 'attack':7A,33B,48B,67C 'captur':11A,38B,55B,77C 'catcher':2A,21B,23B,62C 'chang':34B 'code':1A,10A,20B,22B,40B,61C,76C 'code-catch':19B 'cve':12A,15A 'descript':42B 'insecur':4A,27B,58C 'let':6A,30B 'manipul':8A,57B,70C 'mechan':78C 'permiss':5A,28B,59C 'read':50B 'say':45B 'send':52B 'sms':9A,39B,75C 'sms-code-captur':74C 'unauthor':32B,66C 'versioncod':24B,63C","nicknames":[],"mitigations":[],"who_affected":"Only installs of the Code Catcher app at versionCode 131 are described; the sources do not say how the app is distributed or who runs it. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T17:17:56+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107043","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107043","severity":null,"published_at":"2026-10-29T17:17:56+00:00","modified_at":"2026-10-29T17:17:56+00:00","first_seen_at":"2026-10-29T17:26:16+00:00","fetched_at":"2026-10-29T17:26:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}