CVE-2026-75559CWE-201

CVE-2026-75559

Medium · published October 15, 2026

CVSS v3.0
5.3
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-10-15T13:17Z
References (3)
https://apps.apple.com/jp/app/%E8%BB%8A%E6%A4%9C%E8%A8%BC%E9%96%B2%E8%A6%A7%E3%82%A2%E3%83%97%E3%83%AA/id1633947799 · [email protected]https://jvn.jp/en/jp/JVN94004488/ · [email protected]https://play.google.com/store/apps/details?id=jp.go.mlit.android.shakenetsuran&hl=ja · [email protected]
EPSS history
Timeline
  • 16 OCT 03:32Z
    EPSS moved — → 0%
    epss
  • 15 OCT 08:28Z
    The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted…
    cvelistv5
  • 15 OCT 08:28Z
    The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted…
    cvelistv5