CVE Catalog
CVE-2026-21075
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.
Risk Assessment
A remote attacker could exploit a crafted URL to access confidential data, potentially leading to a privacy breach.
Recommendation
Update My Galaxy to the latest version that includes the fix.
Original NVD description (English source)
Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.