Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.