CVE-2026-47782
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The Android app RoboForm Password Manager by Siber Systems handles Android intents without proper URL validation, allowing silent file downloads from malicious sites without user consent.
Risk Assessment
An attacker can supply a malicious URL via an intent, causing malware download without user awareness, compromising data security.
Recommendation
Update RoboForm Password Manager to the latest version that includes intent validation fixes.
Original NVD description (English source)
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.