CVE-2026-116105
Received Received - Intake

Cleartext Transmission in HeyCyan App for Android

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116105
EUVD
EUVD-2026-109593

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a HeyCyan App 1.0.103

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-310 Cryptographic Issues
CWE-319 The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves HeyCyan App 1.0.103 on Android where a weakness in the Network Security Configuration allows sensitive information to be transmitted in cleartext. The attack requires remote access and is complex to execute.

Detection Guidance

This vulnerability involves cleartext transmission of sensitive information due to a misconfigured Network Security Configuration in HeyCyan App 1.0.103. To detect it, inspect the app's AndroidManifest.xml for network security settings allowing cleartext traffic. Use tools like apktool to decompile the APK and review the file. Check network traffic with Wireshark or tcpdump for unencrypted sensitive data transmission.

Impact Analysis

An attacker could intercept sensitive data transmitted by the app due to cleartext transmission. This may lead to unauthorized access to personal or confidential information.

Compliance Impact

This vulnerability could violate GDPR and HIPAA requirements for protecting sensitive data in transit. Non-compliance may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update or remove HeyCyan App 1.0.103 if a patched version is available. If not, disable the app until a fix is released. Configure network security to enforce TLS for all connections. Use a firewall or network monitoring tool to block unencrypted traffic from the app. Contact the vendor for a patch or alternative solution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116105. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart