CVE-2026-107016

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

PT-2026-132171

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

CVE-2026-107016: n/a: Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

CVE-2026-107016

Fossify Contacts version 1.3.0 contains a security vulnerability due to insecure permission settings . This flaw allows unauthorized attackers to access and read the stored contact information of other users. While the vulnerability is confirmed across multiple security databases, specific techni...

Fossify Contacts security vulnerability

Version 1.3.0 of Fossify Contacts contains a security vulnerability stemming from insecure permission settings. This vulnerability may allow unauthorized attackers to access and read contact information stored by other users...

CVE-2026-107016

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

CVE-2026-107016

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

EUVD-2026-112929

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts...

CVE-2026-110232

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232

Fossify File Manager versions through 1.6.2 are vulnerable to a path traversal vulnerability (Zip Slip) within the DecompressActivity component. The root cause is an unanchored startsWith check that fails to properly restrict file paths during extraction. An attacker can provide a crafted ZIP arc...

EUVD-2026-99016

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232: Improper Limitation of a Pathname to a Restricted Directory

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../ x/file to create or overwrite files in sibling folder...

PT-2026-111855

Name of the Vulnerable Software and Affected Versions Fossify File Manager versions prior to 1.6.3 Description A path traversal issue exists where crafted ZIP archives can write files outside the intended extraction folder. This occurs because of an unanchored startsWith check, allowing attackers...