CVE-2026-18604

MEDIUM 5.3

textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus. Such manipulation leads to improper export of android application components. The attack needs to be performed locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

CWE	CWE-926
Vendor	textplus
Product	text message and call app
Published	Aug 3, 2026

Stay Ahead of the Next One

Get instant alerts for textplus text message and call app

Be the first to know when new medium vulnerabilities affecting textplus text message and call app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

textPlus / Text Message and Call App

8.3.0 8.3.1 8.3.2 8.3.3 8.3.4 8.3.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/385527 vuldb.com: https://vuldb.com/vuln/385527/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18604 vuldb.com: https://vuldb.com/submit/851700 github.com: https://github.com/actuator/com.gogii.textplus

Credits

🔍 Actuator (VulDB User) VulDB CNA Team