CVE-2014-7726: The Golosinas Simpson1 (aka com.wGolosinasSimpson1) application 0.1 for Android does not verify X.509 certi...

Security readout for executives and security teams

This CVE concerns an Android app, Golosinas Simpson1 version 0.1, that does not properly verify SSL server certificates. On a hostile network, an attacker could impersonate the app’s server and intercept sensitive information. The source bundle does not provide a CVSS score, patch status, or evidence of active exploitation. Exposure appears limited to Android devices with Golosinas Simpson1, also named com.wGolosinasSimpson1, version 0.1 installed. The source bundle does not show enterprise software, server-side products, or other app versions as affected. Treat as moderate priority if the app exists in your environment, because it can expose sensitive information over intercepted network connections. If mobile inventory confirms the app is absent, business urgency is low. Mitigation focus: Inventory managed Android devices for Golosinas Simpson1 or package com.wGolosinasSimpson1.; Remove or block the affected app where business use is not required.; Check vendor, app store, and CERT guidance for any fixed release..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.