---
id: CVE-2026-116105
title: >-
  HeyCyan App Network Security Configuration AndroidManifest.xml cleartext
  transmission
summary: >-
  A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is
  an unknown function of the file AndroidManifest.xml of the component Network
  Security Configuration. Executing a manipulation can lead to cleartext
  transmissio…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-319
  - CWE-310
product: HeyCyan App
affected:
  - heycyan_app 1.0.103
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T01:15:18.741Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116105'
references:
  - url: 'https://vuldb.com/vuln/426173'
    label: >-
      VDB-426173 | HeyCyan App Network Security Configuration
      AndroidManifest.xml cleartext transmission
  - url: 'https://vuldb.com/vuln/426173/cti'
    label: 'VDB-426173 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-116105'
    label: CVE-2026-116105 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1002850'
    label: >-
      Submit #1002850 | HeyCyan HeyCyan Android application 1.0.103 Cleartext
      Transmission of Sensitive Information
  - url: 'https://github.com/azurejoga/heycyan-vulnerabilitys'
tags:
  - cve.org
ingestedAt: '2026-10-26T02:13:26.479Z'
---

## Overview

A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `heycyan_app 1.0.103`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.