CVE-2026-73335

MediumCVSS 4.6/10Last modified Aug 28, 2026

Description

Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application.

Metrics

CVSS 4.0 4.6/10CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-939

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-733366.4Joomla! Core - [20260806] - XSS through schema.org outputs in Joomla 5.1.0-5.4.7, 6.0.0-6.1.2 - Improper escaping flags lead to an XSS vectoCVE-2026-733377.5Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector thaCVE-2026-733387.1Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.CVE-2026-733399.3Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.CVE-2026-73348.8Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption viaCVE-2026-733406.5Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.CVE-2026-733419.8Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.CVE-2026-733427.1Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.CVE-2026-7334310.0Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.CVE-2026-733445.9Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.CVE-2026-733457.1Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.CVE-2026-733467.6Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.
CVE-2026-73335: Medium severity, CVSS 4.6 | Vulnix