CVE-2026-73335: Improper authorization in handler for custom URL scheme in Digital Agency Android App "Myna Point"

CVE-2026-73335 describes an improper authorization vulnerability in the handler for a custom URL scheme in the Digital Agency Android app "Myna Point." A malicious application installed on the user's device can send crafted Intents to the vulnerable app, potentially causing arbitrary JavaScript execution within the context of the affected application. The vulnerability is rated medium severity with a CVSS 3.0 score of 5.3, reflecting local attack vector with low privileges required but user interaction needed. No patch or official remediation level has been provided as of the published date.

Exploitation of this vulnerability could allow a local attacker with a malicious app installed on the same Android device to execute arbitrary JavaScript within the vulnerable application. This may lead to limited confidentiality, integrity, and availability impacts within the context of the affected app. There is no evidence of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious about installing untrusted applications that might exploit this vulnerability. No vendor-provided mitigation or temporary fix is currently documented.