Medium severity6.5NVD Advisory· Published Oct 1, 2026· Updated Oct 1, 2026
CVE-2026-102666
CVE-2026-102666
Description
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.