CVE-2026-26897

An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...

EUVD-2026-67100

An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...

CVE-2026-26897

EcoOnline EHS for Android (com.airsweb.v10 v0.2.499) is vulnerable to a deep link validation bypass in its MainActivity. The app's ehs-app:// scheme handler performs a naive string replacement (ehs-app: → https:) and loads the result into the WebView without applying the host allow-list used on a...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — Bypass della validazione dei deep link → Reindirizzamento aperto WebView CVE-2026-26897 Divulgazione pubblica / advisory per CVE-2026-26897 , un bypass della validazione dei deep link nell'applicazione Android EcoOnline EHS com.airsweb.v10. Un deep link ehs-app://...

Exploit for CVE-2026-26897

EcoOnline EHS Android — Deep Link Validation Bypass → WebVie...