8 matches found
CVE-2026-116105
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...
CVE-2026-116106
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about th...
CVE-2026-116106 HeyCyan App FileProvider access control
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about th...
EUVD-2026-109594
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about th...
CVE-2026-116106
The HeyCyan App 1.0.103 for Android (package com.glasssutdio.wear) contains a critical improper access control vulnerability in its FileProvider component. The application exports a FileProvider where the provider_paths.xml incorrectly includes a root-path (`path=
CVE-2026-116105 HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...
CVE-2026-116105
The HeyCyan App 1.0.103 for Android (package com.glasssutdio.wear) is vulnerable to cleartext transmission of sensitive information due to a permissive Network Security Configuration in the AndroidManifest.xml. This allows the app to communicate over plain HTTP and trust user-installed Certificat...
EUVD-2026-109593
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched...