CVE-2014-6723: The Comics Plus (aka com.iversecomics.comicsplus.android) application 1.06 for Android does not verify X.50...

Security readout for executives and security teams

Comics Plus for Android 1.06 reportedly accepted invalid SSL/TLS server certificates. A person positioned on the same network could impersonate the service and intercept sensitive app traffic. The provided sources do not give a CVSS score, patch status, or evidence of real-world exploitation. Exposure is likely limited to Android devices with Comics Plus package com.iversecomics.comicsplus.android version 1.06 installed. Risk is higher on untrusted Wi-Fi or networks where an attacker can intercept traffic. The sources do not identify enterprise deployment prevalence or other affected versions. Treat this as a targeted mobile exposure check, not an enterprise-wide emergency based on the provided evidence. Prioritize action if the app is present on managed devices or used with sensitive accounts on public networks. Mitigation focus: Inventory managed Android devices for the Comics Plus package and version 1.06.; Check vendor or app-store guidance for a fixed version or retirement notice.; Remove or block the app if no supported fixed version is available..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.