TI-2026-65457 CVE-2026-102667 · GHSA-9jq9-g952-299j
Joyland AI WebView command injection
Priority MEDIUM 40
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView.
Joyland
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Joyland records in CISA KEVNo Joyland vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-65459 CVE-2026-102669 · GHSA-3v5q-8wpg-2hx4
Joyland AI hostname checking disabled
Priority LOW 36
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
TI-2026-65456 CVE-2026-102666 · GHSA-pqc3-2xg8-vj54
Joyland AI hard-coded credentials for push notifications
Priority LOW 36
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of…
TI-2026-65461 CVE-2026-102671 · GHSA-vgxg-97fh-vqcv
Joyland AI WebView accepts invalid SSL certificates
Priority LOW 35
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.
TI-2026-65458 CVE-2026-102668 · GHSA-7wm6-9mpv-fh4j
Joyland AI accepts TLS certificates without validation
Priority LOW 35
The Joyland AI app accepts any TLS certificates from any server without validation.
TI-2026-65460 CVE-2026-102670 · GHSA-ccrc-wwj2-gmgv
Joyland AI enables HTTP
Priority LOW 23
Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.