{"vulnerability": "CVE-2026-4988", "sightings": [{"uuid": "7a0c5172-4f5d-48c8-87ee-1b8517223cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi356h5ptw2z", "content": "", "creation_timestamp": "2026-03-27T22:11:37.007185Z"}, {"uuid": "93837249-956a-4ab9-afe3-03e66f2b03ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49883", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv2243bjm22w", "content": "\ud83d\udea8 CVE-2026-49883 \u2014 CVSS 10 CRITICAL\n\nIn checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device stat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-49883\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:27.563495Z"}, {"uuid": "d5328429-52ed-4096-a28a-db5ff1f1907b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49882", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:48:10.776006Z"}, {"uuid": "2f623d5e-ecdd-4261-ae9f-9774a8b60629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49887", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:48:15.226628Z"}, {"uuid": "f40441e0-b2a7-4f90-971f-ffaef93fa99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49884", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:48:13.003008Z"}, {"uuid": "140d58c2-141b-46ac-9dd3-28fd8ca2aae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-49881", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:48:08.549738Z"}, {"uuid": "cae44f08-4f0e-4ab1-a0c3-1f22e59d0201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "seen", "source": "https://t.me/GithubRedTeam/101738", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LSPromise\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a LSPosed\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 00:52:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combined of CVE-2026-49881 and CVE-2026-43284\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:05.381778Z"}, {"uuid": "29f92c09-823e-419a-a8b8-5d5fa7db39dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "seen", "source": "Telegram/5hU-vyJQb34Cr5mU93P2a72Bt6OsH-i5bvqDUFz-6olvJkU", "content": "", "creation_timestamp": "2026-09-09T08:00:05.481507Z"}, {"uuid": "143e150f-5ad5-4a76-9504-288fbe44a7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "seen", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-09T16:00:06.399012Z"}, {"uuid": "cc6b0294-3c76-4df1-9f23-e60755024890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49883", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2fy3k422", "content": "CVE-2026-49883 - android\nThe PermissionsManager component in your software can reveal sensitive device status information without checking user permissions. This means anyone with access to the system could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#android #google #CVE #infosec", "creation_timestamp": "2026-09-09T22:20:05.054438Z"}, {"uuid": "c6b76237-c6c9-4ac1-bba6-1728fd8e6eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "published-proof-of-concept", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-10T00:00:34.308805Z"}, {"uuid": "27d4c88c-1f6e-424f-937c-8f00db6938f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "published-proof-of-concept", "source": "Telegram/5hU-vyJQb34Cr5mU93P2a72Bt6OsH-i5bvqDUFz-6olvJkU", "content": "", "creation_timestamp": "2026-09-10T00:00:48.202402Z"}, {"uuid": "00e85282-ac4e-4623-8e80-0a5f595d1468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49881", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101738", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LSPromise\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a LSPosed\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 00:52:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAndroid complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combined of CVE-2026-49881 and CVE-2026-43284\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:50.797146Z"}, {"uuid": "26573289-bdcc-468c-a6c2-59bb9c7196d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49883", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvjlqmpngu2e", "content": "\ud83d\udccc CVE-2026-49883 - In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. T... https://www.cyberhub.blog/cves/CVE-2026-49883", "creation_timestamp": "2026-09-15T02:37:07.488864Z"}]}