Unrated severityNVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-107030

Description

Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Craftxbox/yubiclip-xorllm-create
Range: =1.0.1 (versionCode 10003)

Patches

Vulnerability mechanics

References

f-droid.org/packages/com.craftxbox.yubiclip.xor/nvd
github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107030.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000