CVE-2014-6776: The United Advantage NW Federal Cr (aka com.myappengine.uanwfcu) application 1.7 for Android does not verif...

Security readout for executives and security teams

This CVE concerns a specific Android credit union app that did not properly verify server certificates. A nearby or network-positioned attacker could impersonate the service and capture sensitive information. The public record does not provide CVSS, patch details, or evidence of active exploitation. Exposure appears limited to Android devices running United Advantage NW Federal Cr app version 1.7. The CVE affected-product metadata is incomplete, so confirm by package name, app name, and version in endpoint or MDM inventory. Prioritize if employees or customers may still use this legacy Android banking app. The issue can expose sensitive financial credentials or data on hostile networks, but current exploitation and remediation details are not established in the provided sources. Mitigation focus: Check vendor or credit union guidance for fixed or retired app versions.; Remove or block United Advantage NW Federal Cr Android app version 1.7.; Use only a currently supported app after confirming TLS validation is corrected..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.