Critical · 9.1 CVE-2026-107014 EUVD-2026-112927GHSA-48rp-h5q4-q37p

Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user…

Published Oct 29, 2026 · Updated Nov 2, 2026 · Assigned by mitre

Description

Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another user's' note database.

References

https://f-droid.org/archive/bander.notepad_12.apk
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107014.md