CVE-2026-116106: HeyCyan App FileProvider access control
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require an account or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is required.
Can the issue be exploited over the network?
Yes. The CVSS vector lists network attack access, and the disclosure states that the attack may be initiated remotely.
Which release is identified as affected?
HeyCyan App 1.0.103 on Android is the release identified in the available information.
Is a vendor fix or workaround available?
No remediation information is provided. The vendor was contacted early about the disclosure but did not respond.