unscored

CVE-2026-107033

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and mod…

Impact

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.

Affected products

Product	Affected versions
N/A	Version n/a

References

NVD record
CVE.org record
GitHub advisory
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107033.md
https://github.com/MirakelX/mirakel-android