CVE-2014-6826: The Tic-Tac To The MAX FREE (aka com.tothemax) application 1.2 for Android does not verify X.509 certificat...

Security readout for executives and security teams

This CVE affects Tic-Tac To The MAX FREE 1.2 for Android. The app failed to verify SSL server certificates, so an attacker positioned between the app and server could impersonate the server and capture sensitive information. The source bundle does not identify active exploitation or a vendor patch. Exposure appears limited to Android devices that installed Tic-Tac To The MAX FREE, package com.tothemax, version 1.2. Business exposure depends on whether managed devices ever had this app installed and whether it transmitted credentials, identifiers, or other sensitive data. Treat this as a targeted mobile hygiene issue, not an enterprise-wide emergency. Prioritize confirming whether the app exists on managed Android devices. If present, remove it or verify a fixed version because the flaw can expose sensitive data on hostile networks. Mitigation focus: Inventory Android devices for package com.tothemax and version 1.2.; Remove or disable the app where no business need exists.; Check vendor or app store guidance for any fixed release..

Prepared

Jun 14, 2026, 06:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.