CVE-2026-41961

MediumCVSS 5.9

Published: 15/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.08%

0th percentile - higher than 0% of all known CVEs

Summary

Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.

Risk Assessment

An attacker could exploit improper permission control to disrupt the availability of the contacts feature. This may lead to interruptions in access to contact data.

Recommendation

Apply available security updates for the affected component. Review and tighten permission policies in the contacts module.

Other vulnerabilities in contacts

CVE-2025-21050High
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.

Original NVD description (English source)

Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS