VYPR

NewsBreak

by NewsBreak

CVEs (1)

  • CVE-2026-106715Nov 5, 2026
    risk 0.00cvss —epss —

    NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin check. An attacker can supply such a page through the newsbreak://openweb deep link and invoke NBJS.callNative with the getLoginInfo action, disclosing a…