VULNERABILITY INTELLIGENCE

CVE-2026-73335

CVSS score5.3 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-08-26
Last modified2026-08-28
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Description

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.

Weakness classification

  • vultures@jpcert.or.jp: CWE-939

Primary references