https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:28:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319868 EUVD-2026-319868 https://cve.radiocsirt.org/vuln/euvd-2026-319868 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47782 <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.</p> <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47782 https://cve.radiocsirt.org/vuln/ghsa-5mhm-vj5h-r98h <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.</p> <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.</p> https://cve.radiocsirt.org/vuln/ghsa-5mhm-vj5h-r98h https://cve.radiocsirt.org/vuln/jvndb-2026-016626 <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. accepts intents from other applications to open relevant web pages (e.g., login pages), but without sufficient URL validation, user confirmation nor notification.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/357.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Insufficient UI Warning of Dangerous Operations (CWE-357) - CVE-2026-47782&lt;/li&gt;&lt;li&gt;The CVSS vectors above assume that a victim user is directed to install some malicious app, and the app sends an intent to make RoboForm to download some files silently&lt;/li&gt;&lt;/ul&gt;Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> <p>Android App &#34;RoboForm Password Manager&#34; provided by Siber Systems, Inc. accepts intents from other applications to open relevant web pages (e.g., login pages), but without sufficient URL validation, user confirmation nor notification.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/357.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Insufficient UI Warning of Dangerous Operations (CWE-357) - CVE-2026-47782&lt;/li&gt;&lt;li&gt;The CVSS vectors above assume that a victim user is directed to install some malicious app, and the app sends an intent to make RoboForm to download some files silently&lt;/li&gt;&lt;/ul&gt;Johan Francsics reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-016626