CVE-2026-26897

Published September 3, 2026

CVSS 3.19.8

SeverityCritical

Known exploitedNo

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component

NVD references:

https://drive.google.com/file/d/1Guk82o2zPFWoOrw3npLNZoiGGYBJx0Du/view?usp=sharing
https://ecoonline.net.ahmetmersin.com/
https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink
https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink

Primary source: NIST National Vulnerability Database

Stay Ahead of the Threat Landscape