HeyCyan App CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM HeyCyan App CVE published 2026-10-26

CVE-2026-116105

A weakness in HeyCyan App 1.0.103 on Android allows for cleartext transmission of sensitive information due to a misconfigured Network Security Configuration in AndroidManifest.xml. This issue, reported by VulDB, can be exploited remotely with high complexity. The vendor did not respond to the disclosure. Android app developers, security teams, and users of the HeyCyan App should be aware of this vulnerab [truncated]