Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function TokenBalanceContentProvider of the component org.ethereumphone.walletmanager.testing123. Executing a manipulation can lead to improper authorization. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-07 | 1 | General1 |
| 2026-03-08 | 1 | Disclosure1 |
CVE-2026-3671 Local Privilege Escalation in Freedom Factory dGEN1 via Improper Authorization https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3671
Post summary
The entry notes a local privilege escalation vulnerability (CVE-2026-3671) in Freedom Factory dGEN1 caused by improper authorization, but offers no PoC, exploit, active exploitation evidence, or patch information.
CVE-2026-3671 A flaw has been found in Freedom Factory dGEN1 up to 20260221. Affected by this vulnerability is the function TokenBalanceContentProvider of the component org.ethereump… https://www.cve.org/CVERecord?id=CVE-2026-3671
Post summary
A new flaw (CVE‑2026‑3671) affecting Freedom Factory dGEN1's TokenBalanceContentProvider function has been disclosed, but no PoC, exploit, or mitigation details are available.