CVE-2026-107049
Received Received - Intake

Arbitrary Storage Setting Change in Forkyz

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: MITRE

Description
An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-107049
EUVD
EUVD-2026-113264

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows attackers to modify another user's storage settings by tricking them into clicking a malicious URI link. The issue exists in Forkyz versionCode 8500000 due to improper input validation in URI handling.

Impact Analysis

If exploited, an attacker could change your storage settings without your consent, potentially leading to data loss, unauthorized access to your files, or disruption of service.

Mitigation Strategies

Update Forkyz to the latest version beyond 8500000 to address the URI handling issue. Disable or restrict user access to storage settings modifications until patched. Monitor network traffic for unusual URI patterns targeting storage settings.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107049. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart