CVE-2026-107033 — Vulnerability intelligence

—

Published: 2026-10-29T16:17:49.053

CVSS

6.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.

Sources

• CVE-2026-107033
• Original advisory
• Original advisory