Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitr

Summary

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data.

Remediation

1. Inventory every Unknown product deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://f-droid.org/packages/de.yaacc/
• Referencehttps://github.com/cbejr/yaacc
• Referencehttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107038.md