ESET identified and documented a vulnerability CVE-2026-28576 that bypasses Android contact access protection by misusing SQL injection in Android system components.
Published
Signal category
Security
Quote
“CVE-2026-28576 is a vulnerability that can bypass Android’s normal contact-access protection by misusing SQL injection in Android system component.”
— Lukas Stefanko|ESET team
Company
ESET
When technology enables progress, ESET is here to protect it.
- Industry
- Software Development
- Location
- Bratislava, SK
- Company size
- 2,044 employees
When technology enables progress, ESET is here to protect it. Since its beginning, ESET cybersecurity software has empowered people to use IT to improve their lives and grow their businesses. A lot has changed over the three decades of ESET’s existence, but our ambition remains the same. We’ve grown into a global brand, protecting tens of millions of people and hundreds of thousands of companies worldwide. We continue to develop ways to protect the technology that enables progress and strive to make inevitable change a change for the better. Visit www.eset.com to learn more.
Founded 1992