Polaris CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Polaris CVE published 2026-10-13

CVE-2026-109106

A path traversal vulnerability exists in Polaris Office App 9.9.19 on Android, specifically in the Document Intake component's com.infraware.service.m.n.a function. This issue allows local attackers to manipulate the _display_name argument, potentially leading to unauthorized file access or creation. The vulnerability has been publicly disclosed and an exploit is available. The vendor has addressed this i [truncated]