GHSA-6qxx-xgg9-2xr8MediumCVSS 3.7
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function...
🔗 CVE IDs covered (1)
📋 Description
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-116105
- https://github.com/azurejoga/heycyan-vulnerabilitys
- https://vuldb.com/cve/CVE-2026-116105
- https://vuldb.com/submit/1002850
- https://vuldb.com/vuln/426173
- https://vuldb.com/vuln/426173/cti
- https://github.com/ohackercego/heycyan-vulnerabilitys
- https://github.com/advisories/GHSA-6qxx-xgg9-2xr8