CVE-2026-107056

The OpenTracks application (versioncode 6751 ) is vulnerable to unauthorized data injection due to insecure permissions in the io.file.importer.ImportActivity component. An attacker can exploit this by sending a crafted SEND message to inject malicious tracking data directly into the victim's loc...

EUVD-2026-113258

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message...