CVE-2026-107020
An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode…
- Risk score
- 50/100
- CVSS
- 7.5 v3.1
- Published
- 29 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a crafted URL.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.5 high
- Remotely exploitable without logging in
References
- https://f-droid.org/packages/ru.yanus171.feedexfork/
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107020.md
- https://github.com/yanus171/Handy-News-Reader/issues/941
- https://github.com/yanus171/Handy-News-Reader/issues/952
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107020.md
Original description
An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers to force victim users into fetching a crafted URL.
Last activity 29 Oct 2026. Patch Forecast updates every hour.