CVE-2026-107037

7.5 HIGHpublic exploit available

Published 2026-10-29 · Updated 2026-10-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a note id.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-284

Public exploit & PoC references

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107037.md
https://github.com/spacecowboy/NotePad
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107037.md

All references

https://f-droid.org/packages/com.nononsenseapps.notepad/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107037.md
https://github.com/spacecowboy/NotePad
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107037.md

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2013-10077PoC
MEDIUMCVE-2023-54412PoC
CRITICALCVE-2024-34320
HIGHCVE-2025-70962PoC
HIGHCVE-2026-100114
HIGHCVE-2026-100115
MEDIUMCVE-2026-100621PoC
CRITICALCVE-2026-100758

Related by shared AI tags and CWE weakness class. Browse the full archive.