CVE-2026-101886

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Android versions prior to 15.3.1.311364

Description A path traversal issue exists where a malicious application can write files into the private data directory of the software. This is achieved by exploiting the exported crosslaunch.share activity and an unsanitized display name retrieved from a ContentProvider used during file path construction. An attacker can use a shared content:// URI containing ../ sequences in the display name to place controlled content into directories including databases/, shared prefs/, no backup/, and files/ without requiring user interaction.

Recommendations Update Cisco Jabber for Android to version 15.3.1.311364 or later.