{"id":"CVE-2026-28652","title":"In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check","summary":"In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed…","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-862"],"vendor":"google","product":"android","affected":["android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:06:34.023","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28652","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00161,"epssPercentile":0.05746,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:18:44.612622Z"},"ingestedAt":"2026-09-08T19:08:49.642Z","slug":"CVE-2026-28652","body":"## Overview\n\nIn multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201569,"id":"CVE-2026-28652","ts":1789399511047,"field":"cvss","old":null,"new":"3.1"},{"seq":201568,"id":"CVE-2026-28652","ts":1789399511047,"field":"severity","old":"none","new":"low"},{"seq":200303,"id":"CVE-2026-28652","ts":1789397086475,"field":"cvss","old":"3.1","new":null},{"seq":200302,"id":"CVE-2026-28652","ts":1789397086475,"field":"severity","old":"low","new":"none"},{"seq":198227,"id":"CVE-2026-28652","ts":1789391744172,"field":"cvss","old":null,"new":"3.1"},{"seq":198226,"id":"CVE-2026-28652","ts":1789391744172,"field":"severity","old":"none","new":"low"},{"seq":196020,"id":"CVE-2026-28652","ts":1789383399562,"field":"cvss","old":"3.1","new":null},{"seq":196019,"id":"CVE-2026-28652","ts":1789383399562,"field":"severity","old":"low","new":"none"},{"seq":194949,"id":"CVE-2026-28652","ts":1789380300574,"field":"cvss","old":null,"new":"3.1"},{"seq":194948,"id":"CVE-2026-28652","ts":1789380300574,"field":"severity","old":"none","new":"low"},{"seq":193736,"id":"CVE-2026-28652","ts":1789378269099,"field":"cvss","old":"3.1","new":null},{"seq":193735,"id":"CVE-2026-28652","ts":1789378269099,"field":"severity","old":"low","new":"none"},{"seq":192523,"id":"CVE-2026-28652","ts":1789376233477,"field":"cvss","old":null,"new":"3.1"},{"seq":192522,"id":"CVE-2026-28652","ts":1789376233477,"field":"severity","old":"none","new":"low"},{"seq":191310,"id":"CVE-2026-28652","ts":1789373126782,"field":"cvss","old":"3.1","new":null},{"seq":191309,"id":"CVE-2026-28652","ts":1789373126782,"field":"severity","old":"low","new":"none"},{"seq":190095,"id":"CVE-2026-28652","ts":1789369121221,"field":"cvss","old":null,"new":"3.1"},{"seq":190094,"id":"CVE-2026-28652","ts":1789369121221,"field":"severity","old":"none","new":"low"},{"seq":188882,"id":"CVE-2026-28652","ts":1789368038526,"field":"cvss","old":"3.1","new":null},{"seq":188881,"id":"CVE-2026-28652","ts":1789368038526,"field":"severity","old":"low","new":"none"},{"seq":187665,"id":"CVE-2026-28652","ts":1789364996671,"field":"cvss","old":null,"new":"3.1"},{"seq":187664,"id":"CVE-2026-28652","ts":1789364996671,"field":"severity","old":"none","new":"low"},{"seq":186452,"id":"CVE-2026-28652","ts":1789363002585,"field":"cvss","old":"3.1","new":null},{"seq":186451,"id":"CVE-2026-28652","ts":1789363002585,"field":"severity","old":"low","new":"none"},{"seq":185238,"id":"CVE-2026-28652","ts":1789360969864,"field":"cvss","old":null,"new":"3.1"},{"seq":185237,"id":"CVE-2026-28652","ts":1789360969864,"field":"severity","old":"none","new":"low"},{"seq":184025,"id":"CVE-2026-28652","ts":1789357943579,"field":"cvss","old":"3.1","new":null},{"seq":184024,"id":"CVE-2026-28652","ts":1789357943579,"field":"severity","old":"low","new":"none"},{"seq":182277,"id":"CVE-2026-28652","ts":1789354098057,"field":"cvss","old":null,"new":"3.1"},{"seq":182276,"id":"CVE-2026-28652","ts":1789354098057,"field":"severity","old":"none","new":"low"},{"seq":181070,"id":"CVE-2026-28652","ts":1789352943574,"field":"cvss","old":"3.1","new":null},{"seq":181069,"id":"CVE-2026-28652","ts":1789352943574,"field":"severity","old":"low","new":"none"},{"seq":179863,"id":"CVE-2026-28652","ts":1789350001261,"field":"cvss","old":null,"new":"3.1"},{"seq":179862,"id":"CVE-2026-28652","ts":1789350001261,"field":"severity","old":"none","new":"low"},{"seq":178656,"id":"CVE-2026-28652","ts":1789347814498,"field":"cvss","old":"3.1","new":null},{"seq":178655,"id":"CVE-2026-28652","ts":1789347814498,"field":"severity","old":"low","new":"none"},{"seq":177449,"id":"CVE-2026-28652","ts":1789346181861,"field":"cvss","old":null,"new":"3.1"},{"seq":177448,"id":"CVE-2026-28652","ts":1789346181861,"field":"severity","old":"none","new":"low"},{"seq":176242,"id":"CVE-2026-28652","ts":1789342752176,"field":"cvss","old":"3.1","new":null},{"seq":176241,"id":"CVE-2026-28652","ts":1789342752176,"field":"severity","old":"low","new":"none"},{"seq":176026,"id":"CVE-2026-28652","ts":1789342358681,"field":"cvss","old":null,"new":"3.1"},{"seq":176025,"id":"CVE-2026-28652","ts":1789342358681,"field":"severity","old":"none","new":"low"},{"seq":175566,"id":"CVE-2026-28652","ts":1789338390180,"field":"cvss","old":"3.1","new":null},{"seq":175565,"id":"CVE-2026-28652","ts":1789338390180,"field":"severity","old":"low","new":"none"},{"seq":174361,"id":"CVE-2026-28652","ts":1789334604917,"field":"cvss","old":null,"new":"3.1"},{"seq":174360,"id":"CVE-2026-28652","ts":1789334604917,"field":"severity","old":"none","new":"low"},{"seq":173156,"id":"CVE-2026-28652","ts":1789333197601,"field":"cvss","old":"3.1","new":null},{"seq":173155,"id":"CVE-2026-28652","ts":1789333197601,"field":"severity","old":"low","new":"none"},{"seq":171970,"id":"CVE-2026-28652","ts":1789330884635,"field":"cvss","old":null,"new":"3.1"},{"seq":171969,"id":"CVE-2026-28652","ts":1789330884635,"field":"severity","old":"none","new":"low"}]}