[ CVE-2026-102666 · Published 1 Oct 2026 ]
Vulnerability in Joyland.ai
CVSS 6.5
EPSS <1%No fix listed yet
[ Description ]Official description
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.