CVE-2026-28611

CVE-2026-28611 affects Android's NFC service , specifically multiple functions within NfcService.java . A missing permission check enables silent payment session hijacking , leading to a local escalation of privilege with no additional execution privileges required and no user interaction needed ...