Galaxy FDS Android SDK vulnerabilities

1 known vulnerability in Galaxy FDS Android SDK from Xiaomi Technology. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Galaxy FDS Android SDK: Improper Validation of Certificate with Host Mismatch

  CVE-2026-26214Feb 12, 2026Xiaomi Technology

  Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled (the default configuration). In GalaxyFDSClientImpl.createHttpClient(), the SDK configures Apache HttpClient with SSLSocketFa