{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/heycyan-app-1.0.103/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:heycyan:app:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-116106"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["HeyCyan App (1.0.103)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["HeyCyan"],"content_html":"\u003cp\u003eA security vulnerability has been identified in the FileProvider component of HeyCyan App version 1.0.103 on Android. The issue is characterized by improper access controls that can be manipulated remotely. The vendor did not respond to disclosure attempts.\u003c/p\u003e\n","date_modified":"2026-10-26T07:37:08Z","date_published":"2026-10-26T07:37:08Z","id":"https://feed.craftedsignal.io/briefs/2026-10-heycyan-fileprovider-access/","summary":"A security vulnerability in the FileProvider component of HeyCyan App 1.0.103 on Android leads to improper access controls. The vulnerability may be exploited remotely.","title":"HeyCyan App: Improper access control in FileProvider (CVE-2026-116106)","url":"https://feed.craftedsignal.io/briefs/2026-10-heycyan-fileprovider-access/"}],"language":"en","title":"CraftedSignal Threat Feed - HeyCyan App (1.0.103)","version":"https://jsonfeed.org/version/1.1"}