[ Vendor · 6 CVEs ]
Joyland
CVEs affecting Joyland published in the last 30 days, plus any Joyland CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102669 | 1 Oct 2026 | CVSS 5.3 | Joyland.aiJoyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. | |
| CVE-2026-102670 | 1 Oct 2026 | CVSS 4.3 | Joyland.aiJoyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it. | |
| CVE-2026-102671 | 1 Oct 2026 | CVSS 5.3 | Joyland.aiThe Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default. | |
| CVE-2026-102666 | 1 Oct 2026 | CVSS 6.5 | Joyland.aiThe Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and… | |
| CVE-2026-102667 | 1 Oct 2026 | CVSS 8.3 | Joyland.aiJoyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions… | |
| CVE-2026-102668 | 1 Oct 2026 | CVSS 5.3 | Joyland.aiThe Joyland AI app accepts any TLS certificates from any server without validation. |