EUVD Vulnerability Catalog
EUVD-2026-112928
Severity: CRITICAL
Base Score: 9.1
CVSS Version: 3.1
Vulnerability Description
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Privileges Required (PR): None
▪
User Interaction (UI): None
▪
Scope (S): Unchanged
▪
Confidentiality Impact (C): High
▪
Integrity Impact (I): High
▪
Availability Impact (A): None
Affected Vendors & Systems
Vendor
n/a
References & Advisory Links
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
mitre
EPSS Probability
0
Known Aliases
CVE-2026-107015
GHSA-6cf3-9ppw-9w2c
Published On
2026-10-29
Last Updated
2026-10-29