CVE-2026-107033

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.

Affected packages

Ecosystem	Package	Introduced	Fixed