CVE-2026-72506
MEDIUM
5,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: active
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM
5,4
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none
Description
AI Translation Available
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
941
Incorrectly Specified Destination in a Communication Channel
IncompleteCommon Consequences
Security Scopes Affected:
Access Control
Other
Potential Impacts:
Gain Privileges Or Assume Identity
Varies By Context
Bypass Protection Mechanism
Applicable Platforms
Technologies:
Mobile
https://jvn.jp/en/jp/JVN00941257/
https://www.nict.go.jp/en/topics/2026/08/10-1.html
https://www.nict.go.jp/publicity/topics/2026/08/10-1.html