CVE-2026-58128

A flaw was found in Alan: Health Insurance for Android. This vulnerability allows a local malicious application on the same device to achieve arbitrary code execution or tamper with application data by overwriting sensitive files in the application's private storage. An attacker can exploit this...

EUVD-2026-117175

Alan: Health Insurance for Android com.alanmobile 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized displayname value...

CVE-2026-58128

Alan: Health Insurance for Android com.alanmobile 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized displayname value...

CVE-2026-58128

The Alan: Health Insurance for Android application (version 1.450.0 ) is vulnerable to a path traversal flaw in the exported ShareReceiverActivity . The root cause is the application's failure to sanitize the _display_name value retrieved from a shared content URI when constructing a destination ...

PT-2026-137207

Name of the Vulnerable Software and Affected Versions Alan: Health Insurance for Android version 1.450.0 Description A path traversal issue exists where a co-resident malicious application can write attacker-controlled files outside the intended directory. This occurs via the exported...