CVE-2026-89038

Verizon Cloud for Android (com.vcast.mediamanager) versions before 26.7.10 contain a path traversal vulnerability in the exported activities OneTouchUploadActivity and PrintShopCloudActivity . The root cause is unsanitized filename concatenation in the file-staging sink: a co-resident malicious a...