Which versions of Get Directions App are affected by CVE-2026-84442?

Memory saved. Analysis complete. Key findings for CVE-2026-84442: - **"Google" tag is wrong** — flagged in `data_quality_flags`; this is MapQuest's app (System1), not Google - **"olsztyn" injection…

Is there a public PoC exploit available for CVE-2026-84442?

Yes, a public proof-of-concept exploit is available for CVE-2026-84442. Prioritise patching immediately. EPSS: 0.2%.

Get Directions App CVE-2026-84442

Q: What is the CVSS score of CVE-2026-84442?

CVE-2026-84442 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-69822 LOW

Path Traversal (CWE-22)

2026-09-02 VulDB

GHSA-2xx7-fjfh-gr5v

Google Path Traversal Get Directions App

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Sep 02, 2026 - 03:22 NVD

MEDIUM LOW

CVSS changed

Sep 02, 2026 - 03:22 NVD

4.8 (MEDIUM) 1.9 (LOW)

Analysis Generated

Sep 02, 2026 - 03:22 vuln.today

CVE Published

Sep 02, 2026 - 02:30 cve.org

MEDIUM 4.8

DescriptionCVE.org

A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component com.mapquest.android.ace. The manipulation leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.