CVE-2026-26897

CVSS 9.8 (critical) · published 2026-08-27

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component

Weakness: CWE-200

Source: NVD CVE-2026-26897

References

• https://drive.google.com/file/d/1Guk82o2zPFWoOrw3npLNZoiGGYBJx0Du/view?usp=sharing
• https://ecoonline.net.ahmetmersin.com/
• https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink
• https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.