CVE-2026-107014
Description
A flaw was found in Bander Notepad. Due to insecure permission configurations, an unauthorized attacker can read and modify note databases belonging to other users. This issue leads to information disclosure and unauthorized data modification.
Statement
This vulnerability is rated as Important because improper permission handling allows unauthorized actors to compromise both the confidentiality and integrity of stored application databases. However, Bander Notepad is a standalone mobile application for the Android platform and is not included or supported across any Red Hat enterprise distributions. As a result, standard Red Hat enterprise environments are not exposed to or affected by this issue.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
