{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cveId":"CVE-2026-106715","cwes":[],"description":"NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through the newsbreak://openweb deep link and invoke NBJS.callNative with the getLoginInfo action, disclosing a signed-in user's account information and session token after the user opens the crafted link.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793888455235,"publishedAt":1793836800000,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/Siestazzz/myVulnDB/tree/main/Mobile/NewsBreak_26.21.0"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/Siestazzz/myVulnDB/blob/main/Mobile/NewsBreak_26.21.0/report.en.md"}],"remediation":[],"revision":"4c709b664c75bd6b57fa76c7505fe71edd9d7d4820e982d9f0c6fb08bfdbb0a1","sources":[{"modifiedAt":1793888455235,"name":"CNA: mitre","retrievedAt":1793891429294,"url":"https://www.cve.org/CVERecord?id=CVE-2026-106715"}],"ssvc":null,"status":"published","title":"CVE-2026-106715","updatedAt":1793891429294}