Joyland
Vulnerability activity for Joyland: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumOct 1, 2026Joyland.ai Crypto / certificateCVE-2026-102671The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.
- 4.3MediumOct 1, 2026Joyland.ai Information disclosureCVE-2026-102670Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.
- 5.3MediumOct 1, 2026Joyland.ai Auth bypass / access controlCVE-2026-102669Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
- 5.3MediumOct 1, 2026Joyland.ai Crypto / certificateCVE-2026-102668The Joyland AI app accepts any TLS certificates from any server without validation.
- 8.3HighOct 1, 2026Joyland.aiCVE-2026-102667Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed app has been granted permissions previously, the attacker can access the entire file system, camera, microphone, and GPS tracking.
- 6.5MediumOct 1, 2026Joyland.ai Auth bypass / access controlCVE-2026-102666The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once.
Top products
- Joyland.ai6 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.