CVE-2026-107052
High · 7.5CVSS
7.5
EPSS
0.4%
Published
Oct 29, 2026
CISA due date
—
The record
Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-114148 Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate… CWE-276
- CVE-2026-112357 GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before… CWE-276
- CVE-2026-115253 An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory… CWE-276
- CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
- CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
- CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
- CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276
- CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may… CWE-276