CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...

CVE-2026-44964

The Datadog Android application prior to version v545-5.9.2 is vulnerable due to the OnCallNotificationActivity being declared as exported without a permission guard. This allows a malicious co-installed application to launch the activity using attacker-controlled Intent extras . Successful explo...

CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...

CVE-2026-44964

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...

CVE-2026-44964: Unintended Proxy or Intermediary

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-controlled Intent extras, including a full-screen lock-screen message, an arbitrary on-call page ID,...

PT-2026-69087

Name of the Vulnerable Software and Affected Versions Datadog Android application versions prior to 545-5.9.2 Description The OnCallNotificationActivity is declared as exported in the AndroidManifest.xml without a permission guard. This allows a co-installed malicious application to launch the...