Login Request a demo
Unscored severity · published Oct 29, 2026
CVE-2026-107029
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting
New
–
CVSS
–
EPSS
No
On KEV
Description
Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107029
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107029
f-droid.org
https://f-droid.org/packages/es.pile/
github.com
https://github.com/rubenalfon/Pile
github.com
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107029.md