CVE-2026-124901

Other issue in the Networking: JAR component

Other issue in the Networking: JAR component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-106716

Unvalidated WebView Bridges Expose User Credentials in ReelShort Android App

ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke getUserInfo, getCredentials, and initUser to obtain user metadata and an encrypted credential payload.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-106715

NewsBreak: NewsBreak: Information disclosure via improper WebView origin check

NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through the newsbreak://openweb deep link and invoke NBJS.callNative with the getLoginInfo action, disclosing a signed-in user's account information and session token after the user opens the crafted link.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-90631

Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Apache

Products

Openoffice

CVE-2026-91901

Improper Authorization in Dell Alienware Command Center Enables Client‑Side Request Forgery

Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-Side Request Forgery.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-91900

Improper Authorization in Alienware Command Center Custom URL Scheme Allows Remote Execution

Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler for Custom URL Scheme vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution, Launch of phishing attacks, and Remote execution.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Dell

Products

Alienware Command Center

CVE-2026-118677

n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted n8n-computer-use:// link to connect their computer to an attacker-controlled instance, inheriting previously granted permissions and acting on the computer through the gateway.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

N8n

Products

N8n

CVE-2026-107024

org.gnosco.share2archivetoday: Share 2 Archive Today: Arbitrary clipboard overwrite via crafted URL

Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via supplying a crafted URL.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-96614

Improper Authorization in Custom URL Scheme Allows Phishing and Session ID Disclosure in GEO Corporation's App

"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Geo Corporation

Products

"ゲオアプリ" For Android "ゲオアプリ" For Ios

CVE-2026-113411

Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme

A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The attack can be executed remotely. The exploit has been made public and could be used. Upgrading to version 2.3.3 can resolve this issue. The patch is identified as f4df21bbc290f6c1956d899cf4da9e963074a6e4. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Nerimity

Products

Desktop

CVE-2026-53418

Improper Authorization in Zoom Workplace Android Custom URL Scheme

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom Communications

Products

Zoom Workplace

CVE-2026-92862

Improper custom URL scheme handling enabling arbitrary website access via crafted Intent

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Wavedash

Products

Ticket Ryutsu Center

CVE-2026-73335

Android App Vulnerable to Improper Authorization via Custom URL Scheme, Allowing Arbitrary JavaScript Execution

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Digital Agency

Products

Android App "myna Point"

CVE-2026-21062

Local Clipboard Data Access via Authorization Bypass in Samsung SemClipboardService

Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Samsung Samsung Mobile

Products

Android Samsung Mobile Devices

CVE-2026-21075

Improper Authorization in My Galaxy URL Scheme Enables Sensitive Data Access

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Samsung Mobile

Products

My Galaxy

CVE-2026-59717

Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the destination hostname. Because no screen in the invitation or onboarding flow shows the parsed server URL before onboarding commits to it, a victim has no way to distinguish a legitimate invite from a malicious one. An attacker can craft an invite so that a single tap on the legitimate-looking "Connect to my Home Assistant server" button opens their /auth/authorize endpoint in the URL-less onboarding WebView, presenting a look-alike login page that captures the victim's credentials. Since invitations are intended to onboard brand-new users, targets are especially unlikely to notice the substitution. This issue is fixed in version 2026.6.1.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Home-assistant

Products

Core

CVE-2026-12189

Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Moovit

Products

Bus & Public Transit App Bus Public Transit App

CVE-2026-53408

Unprivileged Custom URL Scheme Privilege Escalation in Zoom Workplace

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom Zoom Communications

Products

Meeting Software Development Kit Workplace Zoom Workplace

CVE-2026-12190

Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url scheme

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Genspark

Products

Ai Workspace App

CVE-2026-53407

Unauthenticated Privilege Escalation via Improper Authorization in Zoom Workplace URL Scheme

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Zoom Zoom Communications

Products

Workplace Zoom Workplace