CVE-2026-107060
Critical · 9.1CVSS
9.1
EPSS
0.2%
Published
Oct 29, 2026
CISA due date
—
The record
Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-111499 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission… CWE-732
- CVE-2026-118574 Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File… CWE-732
- CVE-2026-107055 Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387… CWE-732
- CVE-2026-107047 Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers… CWE-732
- CVE-2026-107044 Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows… CWE-732
- CVE-2026-107042 Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows… CWE-732
- CVE-2026-107039 Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard… CWE-732
- CVE-2026-107026 Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized… CWE-732