Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 03:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

149-75% vs 7-day avg of 597

2 critical, 41 high, 60 medium, 26 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Medium	6.9	CVE-2026-116106	A security vulnerability has been detected in HeyCyan App 1.0.103 on Android HeyCyanHeyCyan App	NVD	Oct 26 02:17 UTC
CVE-2026-116106A security vulnerability has been detected in HeyCyan App 1.0.103 on Android Executive summary A security flaw has been reported in the HeyCyan App version 1.0.103 on Android. The flaw involves improper access controls in a file-sharing component, and it can reportedly be triggered remotely. The vendor was contacted before disclosure but did not respond. Technical summary The advisory describes an improper access control weakness in the FileProvider component of HeyCyan App 1.0.103 on Android, with the specific functionality left unspecified. The attack may be initiated remotely. Severity score, CVSS vector, and exploitation status are not stated. Preconditions beyond remote initiation are not stated. Affected versions beyond 1.0.103 are not stated. A fixed version is not stated, and the vendor did not respond to disclosure. No workaround or detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects HeyCyan HeyCyan App NIST National Vulnerability DatabasePublished Oct 26, 2026 02:17 UTC Read the advisory
	Medium	6.3	CVE-2026-116105	A weakness has been identified in HeyCyan App 1.0.103 on Android HeyCyanHeyCyan App	NVD	Oct 26 02:17 UTC
CVE-2026-116105A weakness has been identified in HeyCyan App 1.0.103 on Android Executive summary A weakness has been identified in the HeyCyan App version 1.0.103 for Android, which could allow sensitive information to be sent over the network without encryption. The advisory describes the attack as difficult to carry out, and the vendor did not respond to early disclosure contact. No vendor fix or recommended action is stated in the advisory. Technical summary The weakness is in the Network Security Configuration component, specifically the AndroidManifest.xml file, and results in cleartext transmission of sensitive information (CWE class cleartext transmission). The attack can be launched remotely but the advisory says it requires high complexity and is difficult to exploit. The advisory does not state any fixed version, workaround, or detection guidance. The vendor was contacted early but did not respond, so no vendor patch or statement is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploited ConfidentialityLow IntegrityNone AvailabilityNone How it is exploited Attack vector Network Attack complexity High Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects HeyCyan HeyCyan App NIST National Vulnerability DatabasePublished Oct 26, 2026 02:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee