CVE-2026-107019
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Arbeitszeiterfassung2 版本代码 159 的 组件中，由于权限配置不安全，未经授权的攻击者可通过精心构造的 ICS 导入文件，伪造节假日或工时记录。
Possible ATT&CK Techniques 1 AI
T1566.001 · Spearphishing Attachment
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107019
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-107019
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107019
请登录查看更多情报信息。
Other References for CVE-2026-107019 (3)
Same Patch Batch · n/a · 2026-10-29 · 45 CVEs total
| CVE-2026-107048 | MotionCreative Motion UI 101 WebView 远程代码执行漏洞 | |
| CVE-2026-107049 | Forkyz 8500000 任意修改存储设置漏洞 | |
| CVE-2026-107051 | AndFHEM v2.4.1 权限漏洞致配置被篡改 | |
| CVE-2026-107055 | AppML neutriNote CE 1387 自动保存组件权限漏洞 | |
| CVE-2026-107058 | Shelter 445 版本存在认证绕过及状态劫持漏洞 | |
| CVE-2026-107053 | foobnix Librera 7222 权限漏洞致文件被篡改 | |
| CVE-2026-107060 | Tailscale 297862600 权限漏洞可篡改用户配置 | |
| CVE-2026-107056 | OpenTracks 6751 组件权限不当导致数据注入漏洞 | |
| CVE-2026-107052 | ProjectMAXS 27 版 AIDL 接口文件读取漏洞 | |
| CVE-2026-107057 | AndBible 1111 任意代码执行漏洞 | |
| CVE-2026-107050 | RetroArch 1.22.2 任意代码执行漏洞 | |
| CVE-2026-107044 | ProjectMAXS v0.5.19 权限配置不当漏洞 | |
| CVE-2026-107043 | Code Catcher 131 短信捕获机制权限配置漏洞 | |
| CVE-2026-107046 | FocusPodcast 70 组件 SSRF 漏洞可扫描内网 | |
| CVE-2026-107047 | GPSLogger 137 版本权限配置不当致日志被篡改 | |
| CVE-2026-107045 | Citrine v3.1.0 CitrineContentProvider 组件权限漏洞 | |
| CVE-2026-107042 | USP Ultimate Screenshot Painter 240213.009 文件覆盖漏洞 | |
| CVE-2026-107037 | NoNonsense Notes 72600 组件权限漏洞 | |
| CVE-2026-107040 | MBasov OMN-Go 26080824 组件导出漏洞 | |
| CVE-2026-107038 | Yet Another UPnP Controller 50200 组件导出漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →