Hard-Coded Credential Vulnerability in Ticket Ryutsu Center Android Application
CVE-2026-92861

5.1MEDIUM

Key Information:

Vendor

Wavedash Co., Ltd.

Status
Ticket Ryutsu Center
Vendor
CVE Published:
8 October 2026

What is CVE-2026-92861?

The Ticket Ryutsu Center Android application contains hard-coded credentials which can potentially be exploited by attackers. This vulnerability allows unauthorized users to access the API key utilized by the application, posing significant security risks as it may facilitate further exploitation of sensitive data or functionalities within the app. Users should be aware of this vulnerability and ensure proper security measures are in place to mitigate risks.

Affected Version(s)

Ticket Ryutsu Center 0 <= 4.1.9

References

https://play.google.com/store/apps/details?id=jp.co.ticket
https://jvn.jp/en/jp/JVN53292492/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.