Cleartext Transmission Vulnerability in HeyCyan App on Android
CVE-2026-116105

6.3MEDIUM

Key Information:

Vendor

HeyCyan

Status
Heycyan App
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116105?

A vulnerability has been discovered in the HeyCyan App version 1.0.103 for Android, where an insufficiently secured Network Security Configuration allows for the potential cleartext transmission of sensitive information. This weakness enables attackers to remotely manipulate the application, necessitating a sophisticated level of expertise to exploit effectively. Despite early communication to the vendor regarding this issue, there has been no response or remediation efforts.

Affected Version(s)

HeyCyan App 1.0.103

References

https://vuldb.com/vuln/426173
vdb-entry
https://vuldb.com/vuln/426173/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116105
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ohackercego (VulDB User)
VulDB CNA Team
.