CVE-2026-75559

medium

Description

The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.

References

https://play.google.com/store/apps/details?id=jp.go.mlit.android.shakenetsuran&hl=ja

https://jvn.jp/en/jp/JVN94004488/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101938

https://apps.apple.com/jp/app/%E8%BB%8A%E6%A4%9C%E8%A8%BC%E9%96%B2%E8%A6%A7%E3%82%A2%E3%83%97%E3%83%AA/id1633947799

Details

Source: Mitre, NVD

Published: 2026-10-15

Updated: 2026-10-15

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00155