Live › vulnerability › CVE-2026-107044
ProjectMAXS MAXS Main v0.5.19 (versionCode 19) has insecure permissions that let unauthorized attackers alter its command and transport mechanism. The description does not say what data or actions an attacker gains beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
The sources only say that version 0.5.19 (versionCode 19) of the ProjectMAXS MAXS Main app is affected. Teams that install or run this app should check whether they use that build. The sources do not describe the data path or configuration that makes it exposed.
No product ranges from the sources yet.
v0.5.19 (versionCode 19).No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.
This page as .md · .json · in your agent: get_signal("CVE-2026-107044")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.