← volver
CVE-2026-3674

Freedom Factory dGEN1 org.ethosmobile.ethoslauncher FakeAppProvider improper authorization

CVSS 4.8 MEDIUMEPSS 0.1%CWE-266CWE-285
A vulnerability was found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function FakeAppProvider of the component org.ethosmobile.ethoslauncher. Performing a manipulation results in improper authorization. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Freedom Factory · dGEN1

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →