Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-44965: In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (I

20
Routine
MEDIUM 5.5

CVE-2026-44965 is a medium-severity flaw (CVSS 5.5) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity) are exported with no permission guard. Each accepts a caller-supplied AppWidgetManager.EXTRA_APPWIDGET_ID and, when no deep-link destination is resolved, uses it to load the matching wid

Why this priority

  • No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score5.5 (Medium)
Attack vectorLocal
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance0.2% (top 95%)
CISA exploited listNo
WeaknessCWE-926
Published2026-08-07
Last modified2026-10-23
Publisher (CNA): HackerOne

Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Timeline

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-44965?

No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.

Is CVE-2026-44965 being exploited?

CVE-2026-44965 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-44965 affect?

CVE-2026-44965 affects affected software. Severity is medium (CVSS 5.5). In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, D

How urgent is CVE-2026-44965?

Priority 20/100. No elevated risk signals yet.

Software pages

Android vulnerabilities

References

← Back to latest CVEs