Insecure Storage Vulnerability in SS1 by DOS Co., Ltd.
CVE-2026-109582

5.1MEDIUM

Key Information:

Vendor

Dos Co., Ltd.

Status
Ss1
Vendor
CVE Published:
9 November 2026

What is CVE-2026-109582?

An insecure storage of sensitive information vulnerability exists in the SS1 product developed by DOS Co., Ltd. This flaw allows unauthorized access to sensitive information utilized by the application, potentially leading to data breaches and exploitation of confidential data. Users and organizations utilizing SS1 should take immediate action to assess their security posture and implement necessary safeguards to protect sensitive information from unauthorized access.

Affected Version(s)

SS1 0

References

https://www.dos-osaka.co.jp/news/2026/11/261109.html
https://jvn.jp/en/jp/JVN76179675/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.