CVE-2026-73335
Received Received - Intake

Improper Authorization in Myna Point Android App

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: JPCERT/CC

Description
Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-73335
EUVD
EUVD-2026-66243

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-939 The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Android application Myna Point has an improper authorization issue in how it handles custom URL schemes. This flaw allows a malicious app on the same device to exploit the app's functionality through an Intent, potentially running arbitrary JavaScript within the affected app.

Detection Guidance

Detection involves checking for malicious applications exploiting the custom URL scheme vulnerability in the Myna Point Android app. Inspect installed apps for untrusted sources and monitor for unusual Intent-based interactions or JavaScript execution within the app.

Impact Analysis

If exploited, this vulnerability could allow unauthorized execution of JavaScript within the Myna Point app. This might lead to data theft, unauthorized actions, or compromise of user sessions, depending on the app's permissions and data access.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, which may violate GDPR (data protection) or HIPAA (health data privacy) if sensitive user data is compromised. Organizations using this app may face compliance risks and potential penalties.

Mitigation Strategies

Immediately uninstall the Myna Point application if installed. Avoid installing apps from untrusted sources. Monitor for suspicious activity and ensure the app is updated to the latest version if a patch becomes available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73335. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart