CVE-2026-108897 Details
Description
A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability in the SHAREit App by Smart Media4U Technology, specifically version 6.27.38_ww for Android, has been identified. The issue arises in the WebView JavaScript Bridge component, particularly within the syncInvoke function. This vulnerability exposes sensitive routines and can be exploited remotely. Although the vendor was notified about this issue, there has been no response.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 12, 2026CISA-ADP
Assessed Oct 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://actuator.sh/1-click.html | [email protected] | Exploit |
| https://docs.google.com/document/d/1fCwVC56rkH_qBLhMI_1nQOjq6w_pEGCF/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true | [email protected] | Partial Content |
| https://vuldb.com/cve/CVE-2026-108897 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/973267 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/416688 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/416688/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-749 | Exposed Dangerous Method or Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Smart Media4U Technology SHAREit | 6.27.38_ww |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 13, 2026 | CVE Modified | CISA-ADP |
| Oct 12, 2026 | New CVE Received | [email protected] |