EIP-2026-100065

PRE-CVE

Facebook for Android - 'LoginActivity' Information Disclosure

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100065. PoCs published by Takeshi Terada.

AI-analyzed exploit summary This exploit leverages an intent-based attack in Facebook for Android to load a malicious HTML file via WebView, enabling file theft (e.g., webview.db) through XHR. The attack requires the victim to be logged in and exploits improper intent handling.

Description

Facebook for Android - 'LoginActivity' Information Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED

by Takeshi Terada · textremoteandroid

https://www.exploit-db.com/exploits/38170

View Code ZIP pw:eip

This exploit leverages an intent-based attack in Facebook for Android to load a malicious HTML file via WebView, enabling file theft (e.g., webview.db) through XHR. The attack requires the victim to be logged in and exploits improper intent handling.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Moderate

Reliability

Reliable

Target: Facebook for Android 1.8.1

Auth required

Prerequisites: Victim must be logged into Facebook · Attacker must place malicious HTML file on victim's SD card

MITRE ATT&CK

T1539 - Steal Web Session Cookie T1552 - Unsecured Credentials

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026