CVE-2026-26897

Description

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component

References

• https://drive.google.com/file/d/1Guk82o2zPFWoOrw3npLNZoiGGYBJx0Du/view?usp=sharing
• https://ecoonline.net.ahmetmersin.com/
• https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink