CVE-2017-11132: Heinekingmedia Stashcat

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it.

Affected products

• Heinekingmedia Stashcat: up to and including 1.5.17

Published 2017-08-01. Last modified 2026-06-17.