CVE-2014-6823: The kuailecaidengmi (aka com.licai.kuailecaidengmi) application 1.7.12.15 for Android does not verify X.509...

Security readout for executives and security teams

This CVE covers an Android app that accepted untrusted SSL server certificates. A network-positioned attacker could impersonate a server and read sensitive information sent through the app. The public bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure appears limited to devices running the named Android application and version. The source bundle does not identify enterprise platforms, server products, CPEs, or broader affected versions. Treat as a targeted mobile exposure issue, not a broad infrastructure emergency. Prioritize if the app exists on managed devices or handles sensitive user, financial, or business data. Mitigation focus: Identify devices with package com.licai.kuailecaidengmi installed.; Remove the app or restrict use until vendor guidance is confirmed.; Check vendor or app-store sources for a fixed version..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.