CVE-2026-107020

EUVD-2026-112933
An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a crafted URL.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://f-droid.org/packages/ru.yanus171.feedexfork/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107020.md
https://github.com/yanus171/Handy-News-Reader/issues/941
https://github.com/yanus171/Handy-News-Reader/issues/952
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107020.md