← Vulnerability Intelligence

CVE-2026-107051

Not yet rated

Not yet rated — under the NVD policy in effect since April 2026, most CVEs are no longer analyzed immediately. The EPSS score (if available) is still shown.

Description

Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate another user's FHEM home-automation control configurations.

Metrics

EPSS — exploit probability
0% (percentile: 5) as of 2 November 2026

References