high
advisory
HeyCyan App: Improper access control in FileProvider (CVE-2026-116106)
A security vulnerability in the FileProvider component of HeyCyan App 1.0.103 on Android leads to improper access controls. The vulnerability may be exploited remotely.
CVE search metadata
CVE search record: CVE-2026-116106. Severity: high. CVSS: 7.3. KEV: no. Product: HeyCyan App (1.0.103). Brief: HeyCyan App: Improper access control in FileProvider (CVE-2026-116106). Brief link: https://feed.craftedsignal.io/briefs/2026-10-heycyan-fileprovider-access/
Triage facts
Revision 1- Applicability
- HeyCyan App (1.0.103)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 26, 07:37 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A security vulnerability has been identified in the FileProvider component of HeyCyan App version 1.0.103 on Android. The issue is characterized by improper access controls that can be manipulated remotely. The vendor did not respond to disclosure attempts.