Improper Access Control Vulnerability in ManabiPocket for Parents by Edulab
CVE-2026-86701

1.8LOW

Key Information:

Vendor

Ntt Docomo Business, Inc.

Status
Manabipocket For Parents
Vendor
CVE Published:
15 September 2026

What is CVE-2026-86701?

The application 'ManabiPocket for Parents' by Edulab has a vulnerability due to improper access control in one of its components. This vulnerability can be exploited by a malicious application installed on the user's device, allowing it to gain unauthorized access to sensitive data from ManabiPocket for Parents through Intent manipulation.

Affected Version(s)

ManabiPocket for Parents 0 <= 1.2.3

References

https://manabipocket.ed-cl.com/blog/information/info-1444/
https://jvn.jp/en/jp/JVN72918755/

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
2.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.