CVE-2026-96424Published
Incorrect Permission Assignment for Critical Resource in lomiri-download-manager
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-96424 · Microsoft / collected KEV context
cve-program · CVE-2026-96424
- https://gitlab.com/ubports/development/core/lomiri-download-manager/-/work_items/18
- https://gitlab.com/ubports/development/core/lomiri-download-manager/-/commit/779dfd5bbeb5fe8877627b772e5024e40eda38aa
- https://forums.ubports.com/topic/12671/security-advisory-arbitrary-root-command-execution-and-unauthenticated-arbitrary-file-read-as-root-in-lomiri-download-manager
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.