Unscored severity · published Oct 29, 2026
CVE-2026-107051
Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation…
New
–
CVSS
–
EPSS
No
On KEV
Description
Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation control configurations.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107051
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107051
f-droid.org
https://f-droid.org/packages/li.klass.fhem/
github.com
https://github.com/klassm/andFHEM
github.com
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107051.md