CVE-2026-28665
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 02, 2026
Vendor
unknown
Description
In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.