CVE-2026-107041

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service (DoS).

Affected packages

Ecosystem	Package	Introduced	Fixed