CVE-2014-6769: The Meteo Belgique (aka com.mobilesoft.belgiumweather) application 3.2 for Android does not verify X.509 ce...

Security readout for executives and security teams

Meteo Belgique Android app 3.2 fails to check HTTPS certificates. A person controlling a network path, such as hostile Wi-Fi, could impersonate the app's server and capture sensitive data the app sends. The public record does not provide a CVSS score, patch version, or evidence of real-world exploitation. Exposure appears limited to Android devices with Meteo Belgique 3.2 installed, especially on untrusted or interceptable networks. The bundle lists affected product metadata as n/a, so inventory should search by application name, package name, and version rather than CPE. Treat as a targeted mobile exposure issue, not an enterprise-wide emergency. Prioritize removal or update if the app exists on managed devices, because the flaw undermines HTTPS trust and could expose user data on hostile networks. Mitigation focus: Identify and remove Meteo Belgique 3.2 where business use is not required.; Check the app vendor or store listing for a fixed version or retirement guidance.; Prefer trusted networks for any remaining use until vendor guidance is confirmed..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.