Question 1

What is CVE-2026-107056 — CVE-2026-107056?

Accepted Answer

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.

Question 2

What is the authoritative source for CVE-2026-107056?

Accepted Answer

CVE-2026-107056 (CVE-2026-107056) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-107056CVE-2026-107056

Description

Scoring