CVE-2026-84283

Published: Set 25, 2026 Last Modified: Set 25, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Folder.

922

Insecure Storage of Sensitive Information

Incomplete
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity
Potential Impacts:
Read Application Data Read Files Or Directories Modify Application Data Modify Files Or Directories
Applicable Platforms
All platforms may be affected
View CWE Details
https://fluidattacks.com/advisories/sanguisugabogg
https://fluidattacks.com/advisories/sanguisugabogg
https://play.google.com/store/apps/details?id=com.securefol…
https://play.google.com/store/apps/details?id=com.securefolder.securevault