CVE-2026-41281CWE-319

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability

Medium · published May 13, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability. A man-in-the-middle attacker may access and modify communications transmitted in plaintext, potentially resulting in information disclosure or data tampering.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00146 · 3.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-05-13T23:06Z
EPSS history
Timeline
  • 13 MAY 23:06Z
    Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability
    cvelistv5