{"id":"CVE-2026-107033","published":"2026-10-29T16:17:49.053","lastModified":"2026-10-29T16:30:07.917","description":"Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107033.md","tags":[]},{"url":"https://github.com/MirakelX/mirakel-android","tags":[]}],"exploitRefs":[{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107033.md","tags":[]},{"url":"https://github.com/MirakelX/mirakel-android","tags":[]}],"hasPoc":true,"ai":null}