CVE-2026-106716

Full vulnerability record from the local CVENow database.

Description

ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke getUserInfo, getCredentials, and initUser to obtain user metadata and an encrypted credential payload.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-05 15:17:17.033000

Last modified

2026-11-05 15:17:17.033000

View original CVE JSON

{
  "id": "CVE-2026-106716",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-05T15:17:17.033",
  "lastModified": "2026-11-05T15:17:17.033",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke getUserInfo, getCredentials, and initUser to obtain user metadata and an encrypted credential payload."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/Siestazzz/myVulnDB/blob/main/Mobile/ReelShort_3.8.55/report.en.md",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Siestazzz/myVulnDB/tree/main/Mobile/ReelShort_3.8.55",
      "source": "[email protected]"
    }
  ]
}