CVE-2026-107040: Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow

Unscored severity · published Oct 29, 2026

CVE-2026-107040

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow

New

–

CVSS

–

EPSS

No

On KEV

Description

Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.

Exploitation

Is it being used?

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-107040

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-107040

f-droid.org

https://f-droid.org/packages/net.basov.omngo.fdroid/

github.com

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107040.md

github.com

https://github.com/mvbasov/OMN-Go