critical
advisory
wbpxre150 Shopping List: Insecure component permissions (CVE-2026-107028)
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allow unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.
CVE search metadata
CVE search record: CVE-2026-107028. Severity: critical. CVSS: 9.1. KEV: no. Product: Shopping List (11.0). Brief: wbpxre150 Shopping List: Insecure component permissions (CVE-2026-107028). Brief link: https://feed.craftedsignal.io/briefs/2026-10-shopping-list-insecure-permissions/
Triage facts
Revision 1- Applicability
- Shopping List (11.0)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Oct 30, 19:37 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
The Android application Shopping List version 11.0 (versionCode 11) contains a vulnerability where insecure permissions allow unauthorized attackers to invoke an exported component. This results in the potential manipulation of shopping-list data.