CVE-2026-107023 PUBLISHED

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.

• https://github.com/mhss1/MyBrain
• https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107023.md

• n/a text