CVE-2026-101886: Jabber for Android 0 to before 15.3.1.311364

Affected technology

Jabber for Android · 0 to before 15.3.1.311364
Cisco

Description’s affected range: before 15.3.1.311364

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Attackers can craft a shared content:// URI with a display name containing '../' sequences to place fully attacker-controlled content within directories such as databases/, shared_prefs/, no_backup/, and files/ without user interaction. Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality and availability impact as none; integrity impact as low.