CVE-2026-107019

— UNSCOREDpublic exploit available

Published 2026-10-29 · Updated 2026-10-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports.

Public exploit & PoC references

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107019.md

All references

https://f-droid.org/packages/askanimus.arbeitszeiterfassung2/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107019.md
https://gitlab.com/Askanimus/arbeitszeitkonto

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.