GCVE - cpe:2.3:a:ekia:file_manager:1.2.7:*:android:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ekia:file_manager:1.2.7:*:android:*:*:*:*:*

part: a version: 1.2.7 update: *

Vendor	Ekia (`8bfc8ce4-c200-5fcd-9043-933d88498663`)
Product	File Manager (`3477bcd5-bb9a-5b62-a40e-5aadd9af65d5`)
Edition	android
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-81301`	vulnerable	2026-09-16 04:32:48.469830	Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager's process to read, create, overwrite, or delete files that are accessible to that process. Published: 2026-09-14T15:51:38.531Z Updated: 2026-09-14T19:23:00.039Z Open on db.gcve.eu Reference links https://fluidattacks.com/advisories/waking https://play.google.com/store/apps/details?id=com.ekia.files.manager	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.