Live › vulnerability › CVE-2026-107047
GPSLogger versionCode 137 for Android grants insecure permissions that let an unauthorized app or party change how the app writes its logs. An attacker can therefore manipulate the logged location data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Only installs of GPSLogger built as versionCode 137 are described. The sources do not say which Android permissions are involved or whether an installed malicious app is required to exploit it. Teams that do not run GPSLogger on managed devices can skip it.
No product ranges from the sources yet.
adb shell dumpsys package com.mendhak.gpslogger | grep versionCodeversionCode is 137No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.
This page as .md · .json · in your agent: get_signal("CVE-2026-107047")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.