{"id":"CVE-2026-107036","title":"Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.","summary":"Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.","severity":"medium","cvss":5.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvssSource":"adp","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-02T17:16:11.476326Z"},"published":"2026-10-29","updated":"2026-11-02","sourceUpdated":"2026-11-02T17:16:57.118Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107036","references":[{"url":"https://f-droid.org/packages/net.kollnig.missioncontrol.fdroid/"},{"url":"https://github.com/tobiaskollnig/MissionControl"},{"url":"https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107036.md"}],"tags":["cve.org"],"epss":0.00125,"epssPercentile":0.02259,"ingestedAt":"2026-11-01T20:00:16.973Z","slug":"CVE-2026-107036","body":"## Overview\n\nInsecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component, impacting the tracker blocker mechanism of the application.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":233475,"id":"CVE-2026-107036","ts":1793907110725,"field":"cvss","old":null,"new":"5.1"},{"seq":233474,"id":"CVE-2026-107036","ts":1793907110725,"field":"severity","old":"none","new":"medium"}]}