CVE-2026-116106
Received Received - Intake

Improper Access Control in HeyCyan App for Android

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116106
EUVD
EUVD-2026-109594

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a HeyCyan App 1.0.103

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in HeyCyan App 1.0.103 for Android, specifically in the FileProvider component. It allows improper access controls, meaning unauthorized users might access sensitive data or functions remotely. The vendor did not respond to the disclosure attempt.

Detection Guidance

Detection methods for this vulnerability are not specified in the provided CVE data. Focus on monitoring for unauthorized file access or abnormal behavior in the HeyCyan App 1.0.103 on Android systems.

Impact Analysis

An attacker could remotely exploit this to access sensitive files or perform unauthorized actions on your device. This may lead to data theft, privacy breaches, or further compromise of your Android system.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR (data protection) and HIPAA (health data privacy). Organizations using this app may face compliance failures, legal penalties, or reputational damage due to potential data breaches.

Mitigation Strategies

Immediate steps include uninstalling or disabling the HeyCyan App 1.0.103 on Android devices, applying any available patches from the vendor, and monitoring for suspicious activity related to file access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116106. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart