Improper Access Control in HeyCyan App FileProvider Component on Android
CVE-2026-116106

6.9MEDIUM

Key Information:

Vendor

HeyCyan

Status
Heycyan App
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116106?

A security weakness has been identified in the HeyCyan App version 1.0.103 for Android, specifically within the FileProvider component. This vulnerability allows for improper access control, potentially enabling unauthorized access to sensitive resources. The issue can be exploited remotely, posing significant risks to users' data and privacy. Despite early notifications, the vendor has yet to respond to this critical reporting, highlighting a concerning lack of communication in addressing security issues.

Affected Version(s)

HeyCyan App 1.0.103

References

https://vuldb.com/vuln/426174
vdb-entry
https://vuldb.com/vuln/426174/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116106
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ohackercego (VulDB User)
VulDB CNA Team
.