Paper/Archive/CVE-2026-107015

CVE-2026-107015

mitre — Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note…

public exploit CVSS 9.1

critical.is priorityof 100

37

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/SimpleMobileTools/Simple-Contacts refgithub.com/kanytu/Simple-Contacts/issues/628 exploitgithub.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107015-CVE-2026-107016.md