CVE-2026-102671

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.

• Published Oct 1, 2026
• CVSS 6.9 medium
• 0.1% chance of exploitation in the next 30 days (EPSS)

CVE-2026-102671 at the National Vulnerability Database