CVE-2026-21075
NoneCVSS
—
EPSS
0.5%
Published
Aug 10, 2026
CISA due date
—
The record
Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73335 Android application "Myna Point" is vulnerable to Improper Authorization in Handler for… CWE-939
- CVE-2026-21062 Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local… CWE-939
- CVE-2026-59717 Home Assistant is open source home automation software focused on local control and… CWE-939
- CVE-2026-12189 A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. CWE-939
- CVE-2026-12190 A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. CWE-939
- CVE-2026-53408 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version… CWE-939
- CVE-2026-53407 Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version… CWE-939
- CVE-2026-12065 A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on… CWE-939