Medium · 6.5 CVE-2026-107023 EUVD-2026-113180GHSA-8p8g-2492-c33h

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another use…

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by mitre

Description

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.

References

https://github.com/mhss1/MyBrain
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107023.md