https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:31:44 +0000 https://db.gcve.eu/vuln/cve-2026-81301 <p><strong>Affected:</strong> Ekia File Manager</p> <p>Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions.</p> <p>The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager&#39;s process to read, create, overwrite, or delete files that are accessible to that process.</p> <p><strong>Affected:</strong> Ekia File Manager</p> <p>Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions.</p> <p>The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager&#39;s process to read, create, overwrite, or delete files that are accessible to that process.</p> https://db.gcve.eu/vuln/cve-2026-81301