CVE-2026-26897

Unknown

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

In the EcoOnline EHS (com.airsweb.v10) Android application, version 0.2.499, a remote attacker can obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component.

Risk Assessment

An attacker can steal user data or take control of the application, threatening the confidentiality and integrity of organizational data.

Recommendation

Update the EcoOnline EHS application to the latest version that includes security fixes.

Original NVD description (English source)

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component