CVE-2026-3675Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Freedom Factory dGEN1 up to 20260221. Affected by this issue is the function FakeAppReceiver of the component org.ethosmobile.ethoslauncher. Executing a manipulation can lead to improper authorization. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-266CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-07); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-07: 1Mentions · 2026-03-08: 1Technical Details · 2026-03-07: 103-0703-08
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-3675 A vulnerability was determined in Freedom Factory dGEN1 up to 20260221. Affected by this issue is the function FakeAppReceiver of the component org.ethosmobile.ethoslau… https://www.cve.org/CVERecord?id=CVE-2026-3675

    Post summary

    The statement records CVE-2026-3675 affecting the FakeAppReceiver function in Freedom Factory dGEN1, but provides no technical details, exploit information, or mitigation guidance.

    00000116
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3675 Local Privilege Escalation in Freedom Factory dGEN1 via Improper Authorization https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3675

    Post summary

    CVE-2026-3675 reveals a local privilege escalation flaw in Freedom Factory dGEN1 caused by improper authorization, with no PoC, exploit, patch, or evidence of active exploitation stated.

    0000061
    4.0K followersView on X

Explore more