CVE-2026-116106

HighCVSS 7.3

Published: 26/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android, affecting an unknown functionality of the FileProvider component. The manipulation leads to improper access controls and the attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Assessment

Improper access controls in FileProvider may allow unauthorized access to files shared by the application. This could lead to data leakage or modification by a remote attacker.

Recommendation

Limit the use of HeyCyan App to the necessary minimum and monitor for vendor updates. Until a fix is released, consider implementing additional file access controls at the system level.

Other vulnerabilities in HeyCyan App

CVE-2026-116105Low
A weakness has been identified in HeyCyan App 1.0.103 on Android, affecting an unknown function of the AndroidManifest.xml file of the Network Security Configuration component. Executing a manipulation can lead to cleartext transmission of sensitive information; the attack can be launched remotely but requires a high level of complexity and exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Original NVD description (English source)

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS