CVE-2026-107051

— UNSCOREDpublic exploit available

Published 2026-10-29 · Updated 2026-10-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation control configurations.

Public exploit & PoC references

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107051.md
https://github.com/klassm/andFHEM

All references

https://f-droid.org/packages/li.klass.fhem/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107051.md
https://github.com/klassm/andFHEM

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.