Cross-site Scripting Vulnerability in Miraikan Assist App by Miraikan
CVE-2026-73537

5.1MEDIUM

Key Information:

Vendor

Japan Science And Technology Agency (jst)

Status
Miraikan Assist App Android Version
Miraikan Assist App iOS Version
Vendor
CVE Published:
21 August 2026

What is CVE-2026-73537?

The Miraikan Assist App features a cross-site scripting vulnerability that allows attackers to execute arbitrary scripts within the app's browser component (WebView). This vulnerability may lead to altered content displayed to users, potentially compromising sensitive information or user session integrity.

Affected Version(s)

Miraikan Assist App Android version 0 < 1.1.7

Miraikan Assist App iOS version 0 < 1.0.7

References

https://www.miraikan.jst.go.jp/en/news/general/2026081947...
https://jvn.jp/en/jp/JVN09266484/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.