CVE-2026-107038
Unauthorized Data Access via Insecure Component Permissions in YAACC
Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.
CVSS 3.1 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products