{"uuid": "21feee7f-baeb-4305-8bf7-c8b658c1e31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73296", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117190957574523212", "content": "Microsoft UFO Vulnerability Allows Remote Android Device Takeover\nMicrosoft patched a critical vulnerability in its UFO automation framework (CVE-2026-73296) that allows unauthenticated attackers to remotely control Android devices and steal sensitive screen data. The flaw affects versions prior to 3.0.8 when configured for remote access.\n**If you use Microsoft's UFO automation framework, update it to version 3.0.8 or later ASAP and turn on the required API key authentication. Older versions let anyone on the network fully control your connected Android devices. If you can't update immediately, change the setting back to `localhost` and block incoming traffic to ports 8020 and 8021 at your firewall.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/microsoft-ufo-vulnerability-allows-remote-android-device-takeover-i-v-r-8-e/gD2P6Ple2L", "creation_timestamp": "2026-08-31T16:43:54.352825Z"}