Sensitive Data Exposure in Vehicle Inspection Certificate Viewer Application
CVE-2026-75559

6.9MEDIUM

Key Information:

Vendor

Ministry Of Land, Infrastructure, Transport And Tourism

Status
Vehicle Inspection Certificate Viewer (for Android)
Vehicle Inspection Certificate Viewer (for iOS)
Vendor
CVE Published:
15 October 2026

What is CVE-2026-75559?

The Vehicle Inspection Certificate Viewer application contains a vulnerability that may allow sensitive information to be transmitted insecurely. This exposure can lead to unauthorized access to API integration credentials, including access IDs and access keys, posing a significant risk for users who rely on the application for authenticating their data securely. Remaining vigilant about app permissions and monitoring data transmission practices is crucial for users to protect their sensitive information.

Affected Version(s)

Vehicle Inspection Certificate Viewer (for Android) 0

Vehicle Inspection Certificate Viewer (for iOS) 0

References

https://play.google.com/store/apps/details?id=jp.go.mlit....
https://apps.apple.com/jp/app/%E8%BB%8A%E6%A4%9C%E8%A8%BC...
https://jvn.jp/en/jp/JVN94004488/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.