All security reports
NVD security advisoryHigh

High advisory for In shouldBlockDirectoryFromTree of Exter

CVE-2026-28588 · Reported 2 Nov 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

In shouldBlockDirectoryFromTree of ExterJava ecosystem

Advisory overview

In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected d | Security report | Cevnitra