Unrated

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows...

CVE-2026-107030 First seen on SecPulse Oct 29, 09:00

Original description The description as published by the source.

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

web cve@mitre.org
web github.com
web github.com
web nvd.nist.gov
web f-droid.org
web github.com

Key facts

Severity: Unrated
Published: Oct 30, 2026
First seen on SecPulse: Oct 29, 09:00
GHSA: GHSA-79r3-vgv7-xfwr

NVD GitHub Advisory

Detection sources

NIST National Vulnerability Database01:30
GitHub Security Advisories (Global)03:30
CVE.org (CVE Program・cvelistV5)00:21