{"id":"CVE-2026-107030","published":"2026-10-29T16:17:48.833","lastModified":"2026-10-29T16:30:07.917","description":"Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://f-droid.org/packages/com.craftxbox.yubiclip.xor/","tags":[]},{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107030.md","tags":[]},{"url":"https://github.com/craftxbox/yubiclip-xor","tags":[]}],"exploitRefs":[{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107030.md","tags":[]},{"url":"https://github.com/craftxbox/yubiclip-xor","tags":[]}],"hasPoc":true,"ai":null}