Improper File Access Vulnerability in Electronic Delivery Item Inspection Support System by Japan's Ministry of Land, Infrastructure, Transport and Tourism
CVE-2026-113345

8.5HIGH

Key Information:

Vendor

Ministry Of Land, Infrastructure, Transport And Tourism, Japan

Status
Electronic Delivery Item Inspection Support System
Vendor
CVE Published:
26 October 2026

What is CVE-2026-113345?

The Electronic Delivery Item Inspection Support System, developed by Japan's Ministry of Land, Infrastructure, Transport and Tourism, is susceptible to a vulnerability that allows improper file access permissions. This flaw may enable attackers to manipulate files within the application's installation directory, potentially leading to arbitrary code execution. Such vulnerabilities pose significant security risks, allowing unauthorized access and control over critical system components.

Affected Version(s)

Electronic delivery item Inspection Support System 0

References

https://www.ysk.nilim.go.jp/cals/
https://jvn.jp/en/jp/JVN75668103/

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.