SSL Certificate Acceptance Vulnerability in Joyland AI App by Joyland Technologies
CVE-2026-102671

6.9MEDIUM

Key Information:

Vendor

Joyland

Status
Joyland.ai
Vendor
CVE Published:
1 October 2026

What is CVE-2026-102671?

The Joyland AI app inadvertently allows invalid SSL certificates to be accepted within its invisible advertisement WebView. This flaw can lead to potential security risks, as it compromises the integrity of secure communications, making users vulnerable to man-in-the-middle attacks and data interception.

Affected Version(s)

Joyland.ai *

References

https://www.cve.org/CVERecord?id=CVE-2026-102671
vdb-entry
https://raw.githubusercontent.com/cisagov/CSAF/develop/cs...
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vincent C., CodeVispera
.