Cleartext Transmission Vulnerability in KDDI's Android App
CVE-2026-41281

6.3MEDIUM

Key Information:

Vendor

Kddi Corporation

Status
あんしんフィルター For Au
Vendor
CVE Published:
13 May 2026

What is CVE-2026-41281?

The Android application 'あんしんフィルター for au' developed by KDDI CORPORATION suffers from a vulnerability where sensitive information is transmitted in plaintext. This allows a man-in-the-middle attacker to intercept, read, and potentially modify the communications, leading to unauthorized access to user data and integrity issues with the transmitted information.

Affected Version(s)

あんしんフィルター for au prior to 4.9_b0003

References

https://jvn.jp/en/jp/JVN24167657/

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.