CVE-2026-72506: National Institute of Information and Communications

Описание

Оригинално описание

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.

Засегнати продукти

• National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for Android: 9.1.3 до 9.2.0
• National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for iOS: 9.1.3 до 9.2.0

Вид слабост

• CWE-941 Incorrectly Specified Destination in a Communication Channel

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-72506
• https://nvd.nist.gov/vuln/detail/CVE-2026-72506
• https://www.nict.go.jp/en/topics/2026/08/10-1.html
• https://www.nict.go.jp/publicity/topics/2026/08/10-1.html
• https://jvn.jp/en/jp/JVN00941257/