Vulnerability · Published Sep 17, 2026 · Assigned by VulnCheck
CVE-2026-89038Verizon Cloud for Android < 26.7.10 Path Traversal via OneTouchUploadActivity
Medium 6.2
In plain English
A medium-severity path traversal in Verizon Cloud for Android from Verizon. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerability that allows co-resident malicious applications to write attacker-controlled bytes outside the intended staging directory by supplying a crafted _display_name value containing path-traversal sequences through exported activities OneTouchUploadActivity and PrintShopCloudActivity. Attackers can exploit the unsanitized filename concatenation in the file-staging sink via ACTION_SEND or ACTION_SEND_MULTIPLE intents to achieve arbitrary file write and inject attacker-controlled content into the authenticated user's Verizon Cloud account without user interaction.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Verizon | Verizon Cloud for Android | 0 – before 26.7.10 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- Researcher Disclosure technical-description, exploit
- Google Play Webpage product
- https://www.vulncheck.com/advisories/verizon-cloud-for-android-path-traversal-via-onetouchuploadactivity third-party-advisory