CVE-2026-102666

6.5 MEDIUM

Published 2026-10-01 · Updated 2026-10-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses

CWE-798

All references

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/VA-26-275-03.json
https://www.cve.org/CVERecord?id=CVE-2026-102666

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100294
HIGHCVE-2026-101052PoC
HIGHCVE-2026-102161
HIGHCVE-2026-103096
HIGHCVE-2026-103097
HIGHCVE-2026-105033PoC
MEDIUMCVE-2026-105141PoC
HIGHCVE-2026-105147PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.