medium6.5

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/ta…

Impact

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.

Affected products

Product	Affected versions
N/A	Version n/a

Weakness classification

CWE-732

References

NVD record
CVE.org record
GitHub advisory
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107023.md
https://github.com/mhss1/MyBrain