UBports vulnerabilities
Published CVEs affecting UBports products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-96425
Medium · 5.5
CWE-732 Oct 16, 2026
Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus
CVE-2026-96424
High · 7.8
CWE-732 Oct 16, 2026
Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus