{"id":"CVE-2026-106716","published":"2026-11-05T15:17:17.033","lastModified":"2026-11-05T15:17:17.033","description":"ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke getUserInfo, getCredentials, and initUser to obtain user metadata and an encrypted credential payload.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/Siestazzz/myVulnDB/blob/main/Mobile/ReelShort_3.8.55/report.en.md","tags":[]},{"url":"https://github.com/Siestazzz/myVulnDB/tree/main/Mobile/ReelShort_3.8.55","tags":[]}],"exploitRefs":[{"url":"https://github.com/Siestazzz/myVulnDB/blob/main/Mobile/ReelShort_3.8.55/report.en.md","tags":[]},{"url":"https://github.com/Siestazzz/myVulnDB/tree/main/Mobile/ReelShort_3.8.55","tags":[]}],"hasPoc":true,"ai":null}