CVE-2026-107018

EUVD-2026-112931
Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://f-droid.org/packages/com.ghostsq.commander/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107018.md
https://sourceforge.net/p/ghostcommander