Unscored severity · published Oct 29, 2026
CVE-2026-107039
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to…
New
–
CVSS
–
EPSS
No
On KEV
Description
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a device reset or Denial of Service (DoS).
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107039
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107039
f-droid.org
https://f-droid.org/packages/eu.faircode.netguard/
github.com
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107039.md
github.com
https://github.com/M66B/NetGuard