Live › vulnerability › CVE-2026-107048
A flaw in the WebView rendering path of MotionCreative Motion UI, version code 101, lets an attacker execute arbitrary code by sending a crafted POST request. The sources give no further detail on the affected platform or how the request is processed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
The sources name only MotionCreative Motion UI versionCode 101 and a WebView rendering path; they do not say which deployments use it or what configuration exposes it. Teams that run Motion UI builds at that version should look for them, but the sources do not establish the exposed surface.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request.
This page as .md · .json · in your agent: get_signal("CVE-2026-107048")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.