CVE-2026-108897

MEDIUM 5.3

Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView JS Bridge. The manipulation leads to exposed dangerous routine. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-749
Vendor	smart media4u technology
Product	shareit app
Published	Oct 12, 2026

Stay Ahead of the Next One

Get instant alerts for smart media4u technology shareit app

Be the first to know when new medium vulnerabilities affecting smart media4u technology shareit app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Smart Media4U Technology / SHAREit App

6.27.38_ww

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/416688 vuldb.com: https://vuldb.com/vuln/416688/cti vuldb.com: https://vuldb.com/cve/CVE-2026-108897 vuldb.com: https://vuldb.com/submit/973267 docs.google.com: https://docs.google.com/document/d/1fCwVC56rkH_qBLhMI_1nQOjq6w_pEGCF/edit?usp=sharing&ouid=100768766778062598194&rtpof=true&sd=true actuator.sh: https://actuator.sh/1-click.html

Credits

🔍 Actuator (VulDB User) Actuator (VulDB User) VulDB CNA Team