Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

MBasov OMN-Go lets attackers read and control data

CVE-2026-107040 · published 7 days ago
Summary

The MBasov OMN-Go app has a component that can be accessed by anyone because its permissions are set too loosely. This means an attacker could retrieve or change the app’s data and influence how it works. Updating the app to a version that tightens those permissions or applying the vendor’s recommended fix will stop the risk.

Original advisory text
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-926Improper Export of Android Application Components
Timeline
Published29 Oct 2026
Updated4 Nov 2026
First seen29 Oct 2026
Sources
CVE-2026-107040 · NVD
CVE-2026-107040 · MITRE
Track software like this
Free during beta