Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache directory by supplying a crafted _display_name value containing dot-dot path components through a malicious ContentProvider. Attackers can fire an explicit ACTION_SEND intent at the consuming app's exported share-receiver activity to overwrite arbitrary files in the consuming app's private data directory, including databases, shared preferences, and cached configuration, with attacker-controlled content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-02 | 2 | Disclosure2 |
| 2026-07-07 | 1 | Disclosure1 |
CVE-2026-58460 react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache … https://www.cve.org/CVERecord?id=CVE-2026-58460
Post summary
The post announces a path traversal flaw in react-native-receive-sharing-intent, enabling file write outside the intended cache, and provides a CVE link for further details.
🚨 HIGH severity CVE-2026-58460 (CVSS 7.7) Path traversal flaw in react-native-receive-sharing-intent allows malicious apps to overwrite files in victim app's private directory via crafted ACTION_SEND intent. Impact: Data integrity & availability compromise https://t.co/eGXQTCjQTi
Post summary
The tweet announces a high‑severity path‑traversal flaw in react‑native‑receive‑sharing‑intent, describing its impact and CVSS score, but provides no proof‑of‑concept, exploit, active attack evidence, or repair guidance.
🚨*CVE* CVE-2026-58460 react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache … https://www.cve.org/CVERecord?id=CVE-2026-58460 ----- Traducción: CVE-2026-58460 rea… http://infoflow.cloud`
Post summary
The tweet announces the discovery of CVE‑2026‑58460, a path‑traversal bug in react‑native‑receive‑sharing‑intent that permits a malicious app to write files outside its cache space.