CVE-2026-28616

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description An issue exists in the Setup Wizard component where a confused deputy scenario allows forcing a connection to a malicious network. This can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. This flaw involves bypassing access control mechanisms, which could potentially allow a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.