CVE-2026-26214 | Xiaomi Galaxy FDS Android SDK up to 3.0.8 GalaxyFDSClientImpl.createHttpClient certificate host validation

A vulnerability was found in Xiaomi Galaxy FDS Android SDK up to 3.0.8. It has been classified as critical. This vulnerability affects the function GalaxyFDSClientImpl.createHttpClient. Performing a manipulation results in certificate with host mismatch. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-26214. The attack is possible to be carried out remotely. No exploit exists.