Dashboard / CVE-2026-116106

CVE-2026-116106

MEDIUM 1 PoC
MEDIUM Priority: 0.02 BB Relevance: 84/100
Published: 2026-10-26 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
n/a HeyCyan App 1.0.103

References & Advisories (5)

Proof of Concept (1)

—
https://github.com/ohackercego/CVE-2026-116106
nomi-sec

Bug Bounty Relevance

84 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

6.9 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.35%
Raw Score 0.003480
Percentile 28.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00348
2026-10-28
0.00348

Intelligence Sources

mitre ref →
nvd ref →

External Links