CVE-2026-86701CWE-926

CVE-2026-86701

Low · published September 15, 2026

CVSS v3.0
2.5
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components. A malicious application installed on the user's Android device may exploit the affected component via an Intent, potentially allowing the malicious application to obtain sensitive information from the affected application.

The record
Technical detail
CVSS v3.0
2.5 · LOW
Vector
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
1.8 · CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2026-09-15T10:16Z
References (2)
https://jvn.jp/en/jp/JVN72918755/ · [email protected]https://manabipocket.ed-cl.com/blog/information/info-1444/ · [email protected]
EPSS history
Timeline
  • 17 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 15 SEP 05:51Z
    Android application "ManabiPocket for Parents" contains an improper access control vulnerability in one of its components
    cvelistv5