EIP-2026-100072

This exploit demonstrates a Remote Code Execution (RCE) vulnerability in the Virtual Postage (VPA) Android application via Man-In-The-Middle (MITM) attacks. The vulnerability is due to the use of addJavascriptInterface() in older API versions, allowing arbitrary Java code execution through attacker-controlled JavaScript.